请教一条命令的意思

yanggang209

iptables -A INPUT -m state --state ETABLISHED,RELATED -j ACCEPT
这个是做什么用的，是什么意思

shenhanchinese

--state包的连接状态

yanggang209

完整一点，我也知道是包的连接状态，什么包的连接状态，这个命令有来做什么用的

shenhanchinese

Connection Tracking

Requires state module (-m state).

Packet STATES:
NEW         = A new connection
ESTABLISHED = Packet is part of an existing connection
RELATED     = Packet is related to an existing connection (e.g. ICMP error messages)
INVALID     = Packet doesn't belong to any other connection
               

Tracking FTP Connections:
Because of the nature of the FTP protocol, tracking ftp connections requires a special kernel module: ip_conntrack_ftp. If you wish to use NAT with ftp connection tracking, you must also load the ip_nat_ftp kernel module

anthonywang

数据包进来时候的状态是连接状态,或者你发出去请求的回应 可以通过
就是这个意思,我表达的可能不清楚,小学语文没学好,见谅,呵呵