connection tracking
if you wish to read some more general information about iptables before returning, please click here. 【程序编程相关:pix515防火墙配置策略实例】
【推荐阅读:限制P2P流量一例(原创)】
connection tracking refers to the ability to maintain state information about a connection in memory tables, such as source and destination ip address and port number pairs (known as socket pairs), protocol types, connection state and timeouts. firewalls that do this are known as stateful. stateful firewalling is inherently more secure than its "stateless" counterpart .... simple packet filtering. 【扩展信息:基于freebsd5.3下 PF syn】
what is connection tracking?
connection tracking is accomplished with the state option in iptables. from the iptables manpage:
state this module, when combined with connection tracking, allows access to the connection tracking state for this packet.
... 下一页