> >Unfortunately, IPCHAINS does not have this capability. This is
> >known as a "stateful" firewall because it knows about existing
> >connections.
an add on (spf) for ipchains achieves stateful inspection:
ftp://ftp.interlinx.bc.ca/pub/spf/README
enjoy
____________________________
jose nazario [EMAIL PROTECTED]
PGP: 89 B0 81 DA 5B FD 7E 00 99 C3 B2 CD 48 A0 07 80
PGP key ID 0xFD37F4E5 (pgp.mit.edu)
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls