Odi's astoundingly incomplete notes

New entries | Code

iptables format changes

Gentoo has stabilized iptables 1.4.16. With that some changes to your iptables config are necessary.

Use conntrack instead of state module
before: -m state --state NEW
after: -m conntrack --ctstate NEW

Remove --reap from recent module
before: -m recent --update --seconds 30 --reap -j DROP
after: -m recent --update --seconds 30 -j DROP

Maybe there is more, but I haven't discovered it yet...

posted on 2012-11-24 20:10 UTC in Code | 0 comments | permalink