Hello Arnt, Wednesday, April 30, 2003, 4:47:45 AM, you wrote: AK> On Wed, 30 Apr 2003 03:38:12 +0200, AK> netfilter_user <netfilter_user@xxxxx> wrote in message AK> <1246491441.20030430033812@xxxxx>: >> Hello Arnt, >> >> Wednesday, April 30, 2003, 3:10:30 AM, you wrote: >> >> AK> On Wed, 30 Apr 2003 00:49:31 +0200, >> AK> netfilter_user <netfilter_user@xxxxx> wrote in message >> AK> <5436369716.20030430004931@xxxxx>: >> >> >> Rule: "iptables -A FORWARD -i eth1 -p udp -m --multioport --dport >> AK> /\ >> AK> ..is " -m --multioport " a valid match in iptables, or a correct >> AK> quote of your attempt to write ' -m --multiport ' ? >> >> damn my wrong...it should looks like this: >> iptables -A FORWARD -i eth1 -p udp -m --multioport --dport 23073,23083 >> -j ACCEPT /\ AK> || AK> ..lets try again: I don't find "-m --multioport" _anywhere_ AK> in the docs, so, if you _actually_ try '-m --multioport' in AK> your rule set, it _should_ fail, then you'll wanna try AK> '-m --multiport', without your extra "o". ;-) Oh yes, now i got, i was too sleepy yestorday to understand. Actualy this rule looks like this: iptables -A FORWARD -i eth1 -p udp -m --multiport --dport 23073,23083 -j ACCEPT and after run, shows no error msg. Thats mean it works but it wont helps me to achive this what i want. I repeat my msg here again: In my network, Linux machine connect Local net (eth1) with internet (ppp0). As a default all INCOMING traffic is deny. I made some rules to access SMTP, HTTP etc. but its not important now. It is necessery for nodes from local net to access server that is in Internet. The address of this server is 62.233.202.165 and listen on port 23073 and 23083. Rule: "iptables -A FORWARD -i eth1 -p udp -m --multiport --dport 23073,23083 -j ACCEPT" wont helps and i have received msg in log like this: Apr 30 02:28:41 slack kernel: IPT:UnhandledForward:IN=eth1 OUT=ppp0 SRC=192.168.1.2 DST=62.233.202.165 LEN=36 TOS=0x00 PREC=0x00 TTL=127 ID=23780 PROTO=UDP SPT=1552 DPT=13073 LEN=16 Im newbe at iptables and cant resolve that problem alone. Maybe anyone of You have got idea how to force that to work. -- Best regards, mailto:netfilter_user@xxxxx
