Skip to contentSkip to conversation

iptables.8 - add UNTRACKED state

PATCH New Mart Frauenlob 1 participant 1 message Nov 27, 2009

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 iptables.8 - add UNTRACKED state

Hello,

I hope the diff is useful. It adds the UNTRACKED state to the state and conntrack --ctstate descriptions.

diff -cB /usr/local/src/iptables-1.4.5/iptables.8 /tmp/iptables.8 > iptables.8.diff

Best regards

Mart

*** /usr/local/src/iptables-1.4.5/iptables.8 2009-10-19 19:50:25.000000000 +0200
--- /tmp/iptables.8 2009-11-27 20:45:08.000000000 +0100
***************
*** 607,614 ****
.PP
States for \fB\-\-ctstate\fP:
.TP
\fBINVALID\fR
! meaning that the packet is associated with no known connection
.TP
\fBNEW\fR
meaning that the packet has started a new connection, or otherwise associated
--- 607,618 ----
.PP
States for \fB\-\-ctstate\fP:
.TP
+ \fBUNTRACKED\fR
+ meaning that the packet will not to be tracked by connection tracking.
+ This state can be set using the \fBNOTRACK\fP target.
+ .TP
\fBINVALID\fR
! meaning that the packet is associated with no known connection.
.TP
\fBNEW\fR
meaning that the packet has started a new connection, or otherwise associated
***************
*** 1189,1194 ****
--- 1193,1201 ----
[\fB!\fP] \fB\-\-state\fP \fIstate\fP
Where state is a comma separated list of the connection states to match. Possible states are
+ .B UNTRACKED
+ meaning that the packet will not to be tracked by connection tracking.
+ This state can be set using the \fBNOTRACK\fP target.
.B INVALID
meaning that the packet could not be identified for some reason which includes running out of memory and ICMP errors which don't correspond to any