Skip to contentSkip to conversation

Excluding IP from connection tracking

DISCUSSION Dennis J. 3 participants 3 messages May 29, 2009

lore
Share & tools
lore

Dennis J.

author
#0 lore raw

Hi,
Is there a way to exclude destination IPs from connection tracking? Right now if I enable connection tracking in general on our router after about 30 seconds the connection table fills up. 99% of the traffic is hitting a specific IP and I would like to keep the connection tracking itself available for everything else but disable it for that IP only so the connection table stops getting filled up.

Regards,
Dennis

#1 lore raw
Quoted 11 lines · Dennis J.

Hi,
Is there a way to exclude destination IPs from connection tracking? Right now if I enable connection tracking in general on our router after about 30 seconds the connection table fills up. 99% of the traffic is hitting a specific IP and I would like to keep the connection tracking itself available for everything else but disable it for that IP only so the connection table stops getting filled up.

Regards,
Dennis
--

Hi Dennis,

see -t raw -j NOTRACK.

Regards,

Signature · 1 line
Martin Millnert <[email protected]>
#2 lore raw

Hello,

Quoted 2 lines · Martin Millnert

see -t raw -j NOTRACK.

And make sure NOTRACK is applied to packets in both directions, i.e with that address as either source or destination.