Skip to content
Commit 5d0aa2cc authored by Patrick McHardy's avatar Patrick McHardy
Browse files

netfilter: nf_conntrack: add support for "conntrack zones"



Normally, each connection needs a unique identity. Conntrack zones allow
to specify a numerical zone using the CT target, connections in different
zones can use the same identity.

Example:

iptables -t raw -A PREROUTING -i veth0 -j CT --zone 1
iptables -t raw -A OUTPUT -o veth1 -j CT --zone 1

Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
parent 8fea97ec
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment