Understanding connection tracking in iptables
- by Matt
I'm after some clarification of the state/connection tracking in iptables.
What is the difference between these rules?
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
Is connection tracking turned on when a packet is first matched containing -m state…