Hello,
Matt Singerman a écrit :
-A FORWARD -s 0/0 -d 141.161.111.203 -p all --dport 548 -j ACCEPT
iptables v1.3.5: Unknown arg `--dport'
I am guessing that is because "-p all" include ICMP, which doesn't take
the --dport argument. Am I wrong about that?
It's a little more complicated than that. It's not that ICMP or other
protocols don't take the --dport argument. Actually --dport is valid
only with the "-m tcp" and "-m udp" matches, which in turn are only
valid with - and implicitly created by - "-p tcp" and "-p udp" respectively.