* COUNTING in FORWARD.
@ 2002-12-12 15:38 Remigiusz Kosztowny
2002-12-12 15:50 ` Remigiusz Kosztowny
0 siblings, 1 reply; 2+ messages in thread
From: Remigiusz Kosztowny @ 2002-12-12 15:38 UTC (permalink / raw)
To: linux-admin
Hello.
I have problem with 2.4.20 and 2.4.21-pre1
Counting in FORWARD rule don't work.
For example when i set:
iptables -N get-http
iptables -N put-http
iptables -I FORWARD -p tcp -o eth0 -s xx.xx.xx.0/24 --dport 80 -j put-http
iptables -I FORWARD -p tcp -o eth1 -d xx.xx.xx.0/24 --sport 80 -j get-http
This not work, because:
[root@bridge root]# iptables -xvnL FORWARD | head -n 3
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
0 0 get-http tcp -- * eth1 0.0.0.0/0
xx.xx.xx.0/24 tcp spt:80
0 0 put-http tcp -- * eth0 xx.xx.xx.0/24
0.0.0.0/0 tcp dpt:80
With 2.4.19 everything is OK.
I have bridge with 4 PC ethernet cards, iptables v1.2.7a
Please, help me.
--
Remigiusz Kosztowny
casper@IRCNet
PGP Key ID: 0x08495721 http://www.alfa-system.pl/~kacza/kacza.asc
[ When I Die, Bury Me Upside Down, So The Wolrd Can KISS MY ASS. ]
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: COUNTING in FORWARD.
2002-12-12 15:38 COUNTING in FORWARD Remigiusz Kosztowny
@ 2002-12-12 15:50 ` Remigiusz Kosztowny
0 siblings, 0 replies; 2+ messages in thread
From: Remigiusz Kosztowny @ 2002-12-12 15:50 UTC (permalink / raw)
To: linux-admin
[...]
> [root@bridge root]# iptables -xvnL FORWARD | head -n 3
> Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
> 0 0 get-http tcp -- * eth1 0.0.0.0/0
> xx.xx.xx.0/24 tcp spt:80
> 0 0 put-http tcp -- * eth0 xx.xx.xx.0/24
> 0.0.0.0/0 tcp dpt:80
Sorry for my mistake. Should be:
[root@bridge root]# iptables -xvnL FORWARD | head -n 4
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source
destination
0 0 get-http tcp -- * eth1 0.0.0.0/0
80.48.168.0/24 tcp spt:80
0 0 put-http tcp -- * eth0 80.48.168.0/24
0.0.0.0/0 tcp dpt:80
pkts and bytes are equal zero, why? In 2.4.19 it's OK, in 2.4.20 not.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2002-12-12 15:50 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2002-12-12 15:38 COUNTING in FORWARD Remigiusz Kosztowny
2002-12-12 15:50 ` Remigiusz Kosztowny
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).