Re: specified protocl number problem

[bahamin takhtaei <b_takhtaei@yahoo.com>]

Hi,
I change the rules to these:

iptables -A INPUT -p 200 -j QUEUE
iptables -A OUTPUT -p 200 -j QUEUE

and send some packets with protocol-number=200 to target,
but Iptables can't QUEUE the packets still!


--- On Tue, 11/18/08, Bill Chappell <chappewr@critical.com> wrote:

> From: Bill Chappell <chappewr@critical.com>
> Subject: Re: specified protocl number problem
> To: "bahamin takhtaei" <b_takhtaei@yahoo.com>
> Cc: "netfilter" <netfilter@vger.kernel.org>
> Date: Tuesday, November 18, 2008, 2:47 AM
> The packets you are seeing (TCP, UDP, and ICMP)
> are what you would get if you were to specify
> "-p all".
> "all" is not as inclusive as one might expect.
> To get packets with other protocols, you must
> specific them explicitly.
> 
> Bill
> 
> bahamin takhtaei wrote:
> > Hi everybody,
> > 
> > Why I can't QUEUE some ip-protocol packets such as
> IGMP, AH, ESP and so on?
> > I add these rules to Iptables:
> > 
> > iptables -A INPUT -j QUEUE
> > iptables -A OUTPUT -j QUEUE
> > 
> > and I see that TCP, UDP and ICMP packets are queued
> only and other protocol packets are not! But I see them by
> tcpdump. :(
> > 
> > 
> > 
> >       --
> > To unsubscribe from this list: send the line
> "unsubscribe netfilter" in
> > the body of a message to majordomo@vger.kernel.org
> > More majordomo info at 
> http://vger.kernel.org/majordomo-info.html
> > 
> 
> -- William Chappell, Software Engineer, Critical
> Technologies Inc.
> * Creativity * Diversity * Expertise * Flexibility *
> Integrity *
> Suite 400 Technology Center, 4th Floor 1001 Broad St, Utica
> NY 13501
> 315-793-0248 x148 FAX -9710
> <bill.chappell@critical.com> www.critical.com