On Mon, 26 Dec 2005 22:07:14 -0800, Phil Oester <[email protected]> wrote:
>On Tue, Dec 27, 2005 at 06:45:19AM +0100, Willy Tarreau wrote:
>> On Tue, Dec 27, 2005 at 04:42:00PM +1100, Grant Coady wrote:
>> > + iptables -A INPUT -p all --match state --state ESTABLISHED,RELATED -j ACCEPT
>> > iptables: No chain/target/match by that name
>>
>> So it's not only the NEW state, it's every "--match state".
>
>Odd...works fine here
>
># uname -r
>2.6.14.5
># iptables -nL | grep state
>ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
>DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID
>logdrop tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW
>ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
>DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID
Oops, my apologies to all, just rebuilt kernel again (third time)
from scratch, using the working .config from 2.6.14.4 -- I do not
know how I muffed the .config twice in a row on one box without
stuffing up the seven other boxen I built/tested 2.6.14.5 on :(
Can copying a working 2.6.15-rc7 .config to 2.6.14.5, then make
oldconfig do this?
Grant.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]
