[gentoo-user] ip6tables, state matching

2006-05-01 Thread Edwin Kapauni
Since gentoo-sources-2.6.16-r3 it should be possible to use ip6tables -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT That's what I am trying to do, but ... ~ # ip6tables -A INPUT -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT ip6tables v1.3.4: Couldn't load match

Re: [gentoo-user] ip6tables, state matching

2006-05-01 Thread Mike Williams
On Monday 01 May 2006 17:02, Edwin Kapauni wrote: ip6tables -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT That's what I am trying to do, but ... ~ # ip6tables -A INPUT -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT ip6tables v1.3.4: Couldn't load match

Re: [gentoo-user] ip6tables, state matching

2006-05-01 Thread Graham Murray
Mike Williams [EMAIL PROTECTED] writes: ip6tables doesn't do that. It can however match, or not match, on the syn flag, used to initiate a tcp connection. Look for the --syn option. ip6tables can do that, but I think it needs version 1.3.5 which is in ~arch and kernel = 2.6.16 (with