Other Iptables questions

[blind0ne]

is it possible to use iptables on freebsd?

Could someone explain me this 2 options in advance, please

-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A INPUT -m conntrack --ctstate INVALID -j DROP

 

[SirDice]

is it possible to use iptables on freebsd?

No.

Could someone explain me this 2 options in advance, please

They cause those rules to be statefull.

Stateless vs Stateful Packet Filtering Firewalls - GeeksforGeeks

A Computer Science portal for geeks. It contains well written, well thought and well explained computer science and programming articles, quizzes and practice/competitive programming/company interview Questions.

www.geeksforgeeks.org

 

[rafael_grether]

is it possible to use iptables on freebsd?

No. But why would you want this?
In my opinion, PF is better, fast and more intuitive.

Iptables has some problems. On GNU/Linux, Nftables is more promising.

-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

This first, you are allowing incoming traffic from already-established connections

-A INPUT -m conntrack --ctstate INVALID -j DROP

This second, your are dropping traffic packets marked as invalid (packet can't be identified or everything different from New, Estabilished or Related)

 

[Alain De Vos]

I use IPFW i.e. "/sbin/ipfw". Works fine.