Re: creating one rule for both tcp and udp?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

Matt Singerman a écrit :

-A FORWARD -s 0/0 -d 141.161.111.203  -p all --dport 548 -j ACCEPT

iptables v1.3.5: Unknown arg `--dport'

I am guessing that is because "-p all" include ICMP, which doesn't take the --dport argument. Am I wrong about that?

It's a little more complicated than that. It's not that ICMP or other protocols don't take the --dport argument. Actually --dport is valid only with the "-m tcp" and "-m udp" matches, which in turn are only valid with - and implicitly created by - "-p tcp" and "-p udp" respectively.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux