Re: [CentOS] ip6tables equivalent for NAT?

[Kenneth Porter]

I figure that TCP is easy: Add a rule to the forward chain to allow SYN 
packets. There's already connection tracking to handle established 
connections. Does connection tracking handle UDP? If I allow all UDP 
from the LAN interface and one sends a DNS query from LAN to WAN, will 
the reply get back? I don't want to blanket authorize all UDP. ICMPv6, 
maybe, to allow traceroutes. Unless that's also handled by the tracking 
system.

_______________________________________________
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos