diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2012-03-05 23:13:12 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2012-03-05 23:14:32 +0100 |
| commit | 1de3034f8c4f597cbe4be35b2f84e2848e46e64e (patch) | |
| tree | 517278c56035fa41de7fe74ae505e6218372d066 /conntrackd.8 | |
| parent | bb2534c7aaf0bdb6521371b8a31af6333d3a6a2d (diff) | |
| download | conntrack-tools-1de3034f8c4f597cbe4be35b2f84e2848e46e64e.tar.gz conntrack-tools-1de3034f8c4f597cbe4be35b2f84e2848e46e64e.zip | |
doc: fix example on how to filter events via iptables CT target
You have to use this:
iptables -I PREROUTING -t raw -j CT --ctevents assured,destroy
instead of:
iptables -I PREROUTING -t raw -j CT --ctevents assured
Otherwise, conntrackd cache gets full since no destroy events
are delivered.
Reported-by: Kerin Millar <kerframil@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'conntrackd.8')
0 files changed, 0 insertions, 0 deletions