Answer by ki0 for Iptables, what's the difference between -m state and -m...
Iptables DocAs the documentation say: The conntrack match is an extended version of the state match, which makes it possible to match packets in a much more granular way. It let's you look at...
View ArticleAnswer by kupson for Iptables, what's the difference between -m state and -m...
Both use same kernel internals underneath (connection tracking subsystem).Header of xt_conntrack.c:xt_conntrack - Netfilter module to match connection trackinginformation. (Superset of Rusty's...
View ArticleAnswer by lsmooth for Iptables, what's the difference between -m state and -m...
There is no difference in the outcome of those two rules. Both match extensions use the same data to match the connection tracking state. state is the "old" match extension and conntrack is newer and...
View ArticleIptables, what's the difference between -m state and -m conntrack?
What's the practical difference between:iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPTandiptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPTWhich one is best to...
View Article
