On Sat, 21 Nov 2015 21:48:47 +0100 (CET) Roger Price <roger@xxxxxxxxxxxxxx> wrote: > Hi, I'm reading the iptables tutorial 1.2.2 by Oskar Andreasson at > https://www.frozentux.net/iptables-tutorial/iptables-tutorial.html where I > read: > > Match -p, --protocol > Example iptables -A INPUT -p tcp > Explanation ... This match can also be inversed with the ! > sign, so --protocol ! tcp would mean to match UDP and ICMP. > > So I tried it on openSUSE 13.2 and iptables replied: > > pinta:~ # iptables -A INPUT --protocol ! icmp > iptables v1.4.21: unknown protocol "!" specified > Try `iptables -h' or 'iptables --help' for more information. > > Escaping the ! as \! makes no difference. I am doing something wrong. > Any suggestion as to what it is would be very welcome. This was changed quite some time ago. The 'infix' notation was removed. Try "! --protocol icmp". N -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html