Wilson, Richard E wrote:
>
> I added the following rule to prevent the ip_conntrack table from
> tracking localhost connections:
>
> iptables -t raw -A PREROUTING -i lo -j NOTRACK
>
...
> Is there a better way to create a rule to not track localhost connections?
>
iptables -t raw -A OUTPUT -o lo -j NOTRACK
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@shorewall.net
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
|