miscellaneous questions (iptables v1.2.6a)

miscellaneous questions (iptables v1.2.6a)

[K.A.Rochstad]

[-- Attachment #1: Type: text/plain, Size: 859 bytes --]

Hello.

 

I have 2 questions about this edition of netfilter. (iptables 1.2.6)

 

When I use:

Iptables -A OUTPUT -o $INTERNET -p tcp -s $IPADDR -sport $UNPRIVPORTS -dport 113 -j ACCEPT 

 

I get this error:

Iptables v.1.2.6a: invalid TCP port/service '-d' specified.

Try 'iptables -h' or 'iptables -help' for more information.

 

I get this error in connection to -dport 53 too. (With -p UDP)

 

Q1: 

Is it not possible to make more restrictions between the SOA DNS and a client?

Now I is all protocols allowed all on all ports because -sport and -dport not was permitted in connection to port 53.

 

On the other hand is it no problem to make rules for s local DNS forward Server on port 53.

 

Q2:

How to configure correct rules for these ports?

 

Thank you for your time and advice.

 

Karl

[-- Attachment #2: Type: text/html, Size: 30741 bytes --]