no. it's just an extension so you can use it inorder to define statefull rules. it allows you to track the connection state. for instance if you ping somewhere or visit a website if the connection is accepted then its state regarded as ESTABLISHED. the state can be NEW,ESTABLISHED,RELATED and so on. if you start a new connection so its regarded as NEW. RELATED here the packet is starting a new connection but associated with an existing connection such as icmp error and so on. check the manpage. man iptables-extensions
Обсуждают сегодня