Would there ever be a reason to use “connection-state=new” below the line “action=drop connection-state=invalid” ?
For example, if at the top of my forward rules I say:
add chain=forward action=accept connection-state=established,related
add chain=forward action=drop connection-state=invalid
Is it not the case that the only connection state remaining is "new"?
Am I correct is saying that there is no point in using "connection-state=new" from here on?
chain=forward action=accept protocol=tcp dst-address=192.168.1.5 dst-port=80
chain=forward action=accept connection-state=new protocol=tcp dst-address=192.168.1.5 dst-port=80