Iptables Connections State Introduction

Linux Packet Filtering and Iptables
Prev Chapter 10. Iptables matches Next
10.3. Explicit Matches

Explicit matches are those that have to is specifically loaded with THE-M option. State matches, for example, demand the DIRECTIVE-M state prior to entering the "match" you actual. Some of matches may is protocol specific. Some May is unconnected with the any specific Protocol-for example connection. These might are

NEW (the packet of an as yet unestablished connection),
Established (a connection that's already registered in the kernel),
RELATED (A new connection that is created by a older, established one) etc.

A few may just have been evolved for testing or experimental purposes, or just to illustrate what iptables are capable of. This in turn means, not all of these matches could at the Nevertheless, it may-be-is-you-personally'll find a use for specific explicit matches. And there are new ones coming along all of the time, with each new iptables release. Whether for them or not depends on your imagination and your needs. The difference between implicitly loaded matches and explicitly loaded ones, is this implicitly loaded matches'll au Tomatically is loaded when, for example, your match on the properties of TCP packets, while explicitly loaded matches would Never be loaded automatically-it are up to discover and activate explicit.

Linuxtopia iptables matches