Re: ip6tables support for filtering sctp packets with specific ports

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is what I am getting-

#ip6tables -I OUTPUT -p sctp --sport 3232:65535 -d 2001:db8:0:242::36
-s 2001:db8:0:242::37 -j QUEUE
ip6tables v1.3.6: Unknown arg `--sport'
Try `ip6tables -h' or 'ip6tables --help' for more information.

#ip6tables -I OUTPUT -p udp --sport 3232:65535 -d 2001:db8:0:242::36
-s 2001:db8:0:242::37 -j QUEUE
executes just fine and ip6tables -L shows,
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
QUEUE      udp      2001:db8:0:242::37/128  2001:db8:0:242::36/128udp
spts:3232:65535



On Thu, Oct 6, 2011 at 9:12 PM, Jan Engelhardt <jengelh@xxxxxxxxxx> wrote:
> On Thursday 2011-10-06 16:44, Prashant Batra wrote:
>
>>Hello,
>>
>>
>>I am trying to achieve sctp(ipv6) packet filtering using ip6tables.
>>I have tried to use the following-
>>
>>ip6tables -I OUTPUT –p sctp --sport 3232:65535 -d 2001:db8:0:242::36
>>-s 2001:db8:0:242::37 -j QUEUE
>>
>>Can someone help me on this?
>
> It helps to look at the error message. And using - (U+002D)
This is what I am getting-

#ip6tables -I OUTPUT -p sctp --sport 3232:65535 -d 2001:db8:0:242::36
-s 2001:db8:0:242::37 -j QUEUE
ip6tables v1.3.6: Unknown arg `--sport'
Try `ip6tables -h' or 'ip6tables --help' for more information.

#ip6tables -I OUTPUT -p udp --sport 3232:65535 -d 2001:db8:0:242::36
-s 2001:db8:0:242::37 -j QUEUE
executes just fine and ip6tables -L shows,
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
QUEUE      udp      2001:db8:0:242::37/128  2001:db8:0:242::36/128udp
spts:3232:65535
> rather than – (U+2013) near "-p".
>
Not sure what you mean by (U+2013)


-- Thanks
Prashant
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux