Re: /proc/net/ip_conntrack trange behavior

Dong_Wei wrote:
> what kind of rules should I take? It's seemed that
there is no rule to 
> deal with this special case on 2.4 :(

$IPTABLES -A INPUT -p tcp ! --syn -m state --state NEW -j
DROP

(From http://iptables-tutorial.frozentux.net/ip
tables-tutorial.html#NEWNOTSYN)

> Dong_Wei wrote:
>> what kind of rules should I take? It's seemed that
there is no rule to 
>> deal with this special case on 2.4 :(
> 
> $IPTABLES -A INPUT -p tcp ! --syn -m state --state NEW
-j DROP
Thanks a lot Philip