path: root/extensions/
diff options
Diffstat (limited to 'extensions/')
1 files changed, 0 insertions, 49 deletions
diff --git a/extensions/ b/extensions/
deleted file mode 100644
index b732b28..0000000
--- a/extensions/
+++ /dev/null
@@ -1,49 +0,0 @@
-This module, when combined with connection tracking, allows access to
-more connection tracking information than the "state" match.
-(this module is present only if iptables was compiled under a kernel
-supporting this feature)
-.BI "--ctstate " "state"
-Where state is a comma separated list of the connection states to
-match. Possible states are
-meaning that the packet is associated with no known connection,
-meaning that the packet is associated with a connection which has seen
-packets in both directions,
-meaning that the packet has started a new connection, or otherwise
-associated with a connection which has not seen packets in both
-directions, and
-meaning that the packet is starting a new connection, but is
-associated with an existing connection, such as an FTP data transfer,
-or an ICMP error.
-A virtual state, matching if the original source address differs from
-the reply destination.
-A virtual state, matching if the original destination differs from the
-reply source.
-.BI "--ctproto " "proto"
-Protocol to match (by number or name)
-.BI "--ctorigsrc " "[!] \fIaddress\fP[/\fImask\fP]"
-Match against original source address
-.BI "--ctorigdst " "[!] \fIaddress\fP[/\fImask\fP]"
-Match against original destination address
-.BI "--ctreplsrc " "[!] \fIaddress\fP[/\fImask\fP]"
-Match against reply source address
-.BI "--ctrepldst " "[!] \fIaddress\fB[/\fImask\fP]"
-Match against reply destination address
-.BI "--ctstatus " "[\fINONE|EXPECTED|SEEN_REPLY|ASSURED\fP][,...]"
-Match against internal conntrack states
-.BI "--ctexpire " "\fItime\fP[\fI:time\fP]"
-Match remaining lifetime in seconds against given value
-or range of values (inclusive)