Hello.
I
have 2
questions
about
this
edition
of
netfilter. (iptables 1.2.6)
When
I
use:
Iptables
–A
OUTPUT
–o $INTERNET
–p tcp
–s $IPADDR
–sport
$UNPRIVPORTS –dport 113 –j
ACCEPT
I get this error:
Iptables v.1.2.6a: invalid TCP port/service ‘-d’ specified.
Try ‘iptables –h’ or ‘iptables –help’ for more information.
I get this error in connection to –dport 53 too. (With –p UDP)
Q1:
Is it not possible to make more restrictions between the SOA DNS and a client?
Now I is all protocols allowed all on all ports because –sport and –dport not was permitted in connection to port 53.
On the other hand is it no problem to make rules for s local DNS forward Server on port 53.
Q2:
How to configure correct rules for these ports?
Thank you for your time and advice.
Karl
