Re: rule check

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



  No.  The first rule has a broader scope than the second rule.  The second 
rule limits the destination port to 2000 - 2050, whereas, the first rule will 
accept any destination port.

Qui


On Thursday 16 January 2003 10:30 am, Mike wrote:
> Are these two rules essentially the same ?
>
> Thanks,
> Mike
>
> iptables -A FORWARD -i eth2 -o eth0 -m state --state
> NEW,ESTABLISHED,RELATED -j ACCEPT
>
> iptables -A FORWARD -i eth2 -o eth0 -p tcp --dport 2000:2050 -m
> state --state NEW,ESTABLISHED,RELATED -j ACCEPT


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux