-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 09/01/2016 03:09 PM, Benny Pedersen wrote:
> On 2016-09-01 23:49, Tom Eastep wrote:
> 
>> iptables -a foo -m conntrack --ctstate ESTABLISHED -j ACCEPT
> 
> confirmed works
> 
> iptables is default not compiled with conntrack support on gentoo
> 

That's too bad -- it means that quite a bit of Shorewall functionality
is not available.

- -Tom
- -- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org
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=Qb3g
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to