Tag Info

New answers tagged


One way is to look at the files available: # See which kernel modules are available ls /lib/modules/`uname -r`/kernel/net/netfilter/ # See which iptables extensions are available ls /usr/lib/iptables/ The filenames have a prefix and suffix, but you can just ignore that when looking for a particular module.


Connection tracking is already recording things about the tracked connections, like whether one connection is related to another (such as a new FTP DATA connection being related to an existing FTP session, even though it's on a different port.) The conntrack iptables extension provides additional criteria you can use in iptables rules to match the tracked ...

Top 50 recent answers are included