Re: Quick help with NOTRACK rule

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

Alex Flex a écrit :
> 
> I also tried adding one more rule iptables -t raw -A INPUT -p tcp 
> --sport 22 -j NOTRACK  but i get
> iptables: No chain/target/match by that name.

Please read the iptables man page about the raw table :

            It  provides  the following built-in chains: PREROUTING (for
            packets arriving via  any  network  interface)  OUTPUT  (for
            packets generated by local processes)

Also, you want to match incoming packets with destination port 22, not
source. So :

iptables -t raw -A PREROUTING -p tcp --dport 22 -j NOTRACK
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux