From: "U.Mutlu" <for-gmane@mutluit.com>
To: netfilter@vger.kernel.org
Subject: Re: [iptables] Effect of negating multiple source or dest IPs (-s or -d)
Date: Tue, 08 Nov 2011 17:19:48 +0100 [thread overview]
Message-ID: <j9bkr5$a5f$1@dough.gmane.org> (raw)
In-Reply-To: <c202a761ac23061d639eebb1ec1f661e.squirrel@nmvrt01.netsim.ch>
sim@netmess.org wrote, On 2011-11-08 17:16:
>> What's the effect of this rule on a multihomed box
>> (the IPs below are just some examples, not real):
>>
>> iptables -A INPUT ! -d 1.2.3.4,2.3.4.5 -p all -j DROP
>>
>
> the newest version of iptables says:
>
> iptables v1.4.12.1: ! not allowed with multiple source or destination IP
> addresses
Oh, one wonders why they did so...
> As it will be transformed in to two rules anyway, I'd recommend to
> directly write n rules for that.
But in my above case then this can't work, or can it?
next prev parent reply other threads:[~2011-11-08 16:19 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-11-08 15:56 [iptables] Effect of negating multiple source or dest IPs (-s or -d) U.Mutlu
2011-11-08 16:16 ` sim
2011-11-08 16:19 ` U.Mutlu [this message]
2011-11-08 16:44 ` Jan Engelhardt
2011-11-08 17:11 ` U.Mutlu
2011-11-08 19:23 ` Jan Engelhardt
2011-11-08 20:22 ` Jozsef Kadlecsik
2011-11-08 21:59 ` U.Mutlu
2011-11-08 22:18 ` Amos Jeffries
2011-11-08 23:40 ` Jozsef Kadlecsik
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='j9bkr5$a5f$1@dough.gmane.org' \
--to=for-gmane@mutluit.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.