Andreas Baetz wrote:

> according to the manual and to my tests it [stateful inspection] not only
> works for tcp, but also for udp and icmp (for what else, I don't know)

Thanks, Andreas. I shall overhaul my personal iptables script and add state checking to the rules dealing with UDP / ICMP based services. I thought that stateful inspection was available for TCP only, but it is good to know I made a mistake in assuming so.


Mit freundlichen Grüssen / Regards

Dipl. Inform. Ralph Seichter
ISC Informatik Service & Consulting GmbH
Tel +49 2241 867-0     mailto:r.seichter@isc-inf.com
Fax +49 2241 867-222   http://www.isc-inf.com/