Existing connections / changing IpTables

[Tim]

On Thu, 2006-01-19 at 14:56 -0800, Richard Emberson wrote:
> What happens to existing connections if one reconfigures the
> machine's IpTables?
> Add a new rule?
> Remove a rule?
> Blow away configuration and set a new one?

I've done the above, and nothing has happened to connections, they've
carried on unimpeded.  Of course I've been manipulating rules that
aren't related to what I'm doing (e.g. opening or closing some port to
allow someone to connect to my webserver or block it, while a download
carries on in the background).

> Add a host/port mapping?
> Remove a host/port mapping?

If you mean port forwarding, I've manipulated rules for that, too, with
no problems.  e.g. Forwarding incoming port 8000 connections through to
port 80 on a machine inside the network.

-- 
Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.