I am a little shaky on how the state module works. I was just curious if the below line is a universal white list i.e. equivelent to iptables -A INPUT -j ACCEPT.

iptables -A INPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
link|improve this question

feedback

1 Answer

up vote 1 down vote accepted

The only other possibility for state is INVALID, so while your rule is not semantically a universal whitelist, it is practically equivalent for all ordinary purposes.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.