Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

In Ubuntu docs I saw this sample script which is mentioning netfilter bug:

# Workaround bug in netfilter
-A OUTPUT -m conntrack -p icmp --ctstate INVALID -j DROP

I wonder which bug it's referring and more details on how it will behave without this line

share|improve this question

2 Answers 2

The following link gives some details: http://lists.netfilter.org/pipermail/netfilter-devel/2006-July/025098.html

It seems to be related to errors made by p2p traffic.

share|improve this answer
    
Not so clear what was the problem. –  Michael Aug 20 '10 at 10:04

what's the date of the doc ? propably it's something obsolete

share|improve this answer
    
help.ubuntu.com/community/Router/Firewall 2009-12-19. Would be glad if someone confirm that it's fixed and I don't need this workaround. –  Michael Aug 21 '10 at 0:09

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.