On Wednesday 09 October 2002 10:57 pm, Robert P. J. Day wrote: > On Wed, 9 Oct 2002, Antony Stone wrote: > > The --dport or --sport options are invalid without > > also specifying -p tcp or -p udp > > > > Can you give an example of a rule which works, and which specified a port > > but not a protocol ? > > just the other day, i was at a local LUG meeting and a guy was giving a > quick tutorial on iptables and displayed a sample rule file that contained > the rule: > > iptables -A FORWARD --destination 172.16.0.2 --destination-port 25 \ > --jump ACCEPT > > doesn't this represent an example of what i was asking about? a > reference to a port with no reference to protocol. Yes, it does. However, I do not believe it is an example of a rule which works. Try it on a netfilter machine and see. Antony. -- If you want to be happy for an hour, get drunk. If you want to be happy for a year, get married. If you want to be happy for a lifetime, get a garden.