On Wed, Jun 05, 2002 at 03:07:20PM -0700, Nathan Cassano wrote: > > Hi NetFilter Gurus, > I have heard that ip_conntrack will allow ICMP packets pass that > are related to an existing connection. My question is what specific > related ICMP packets does conntrack allow for a given connection? Does > it allow Source Quench (--icmp-type 4) or Redirects (--icmp-type 5)?
See Joe's rather excellent answer to my previous question along these lines: http://lists.samba.org/pipermail/netfilter/2002-May/023188.html -- FunkyJesus System Administration Team
