conntrack

@RMerlin, I've been looking at ways to minimize router resource usage caused by external Internet hosts. One of the ways to minimize CPU usage and conntrack table entries was to implement the following rule. iptables -t mangle -I PREROUTING -i <wan_face> -m state --state NEW -j DROP On an...