On Wednesday 2008-04-09 00:01, Minh Cao wrote:
>Hi,
>Is that matter if I placed the options/extensions ( -m
>and -p ) in different orders ?
No, but it matters between multiple -m.
>-A INPUT -s 1.2.3.0/24 -p tcp -m tcp --dport 22 -j
>ACCEPT
>-A INPUT -s 1.2.3.0/24 -m tcp -p tcp --dport 22 -j
>ACCEPT
no
>-A INPUT -s 1.2.3.0/24 -p tcp -m state --state NEW -m
>tcp --dport 22 -j ACCEPT
>
>
>-A INPUT -s 1.2.3.0/24 -m state --state NEW -m tcp -p
>tcp --dport 22 -j ACCEPT
no.
(But "-m conntrack --ctstate NEW -m tcp" and
"-m tcp -m conntrack --ctstate NEW" would)
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
