Consider adding the following

-m state --state ESTABLISHED,RELATED
-m conntrack --ctstate ESTABLISHED,RELATED

guess which matched more? right, state
conntrack is much less :((

why ? after 10 minutes starring at the sources I can't figure where
conntrack will lose matches state catch ...


-- 
Paul P 'Stingray' Komkoff 'Greatest' Jr // (icq)23200764 // (irc)Spacebar
  PPKJ1-RIPE // (smtp)[EMAIL PROTECTED] // (http)stingr.net // (pgp)0xA4B4ECA4

Reply via email to