* -m tcp
@ 2004-03-24 18:28 j.travis
2004-03-24 18:39 ` Frederic de Villamil
0 siblings, 1 reply; 4+ messages in thread
From: j.travis @ 2004-03-24 18:28 UTC (permalink / raw)
To: netfilter
Is there any (functional) difference between these two statements?
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp --dport 80 -j ACCEPT
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: -m tcp
2004-03-24 18:28 -m tcp j.travis
@ 2004-03-24 18:39 ` Frederic de Villamil
2004-03-24 18:41 ` j.travis
0 siblings, 1 reply; 4+ messages in thread
From: Frederic de Villamil @ 2004-03-24 18:39 UTC (permalink / raw)
To: j.travis; +Cc: netfilter
On Wed, 24 Mar 2004, j.travis wrote:
> Is there any (functional) difference between these two statements?
>
> -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
>
> -A INPUT -p tcp --dport 80 -j ACCEPT
>
No. Absolutely not.
--
http://www.seclab.jp
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: -m tcp
2004-03-24 18:39 ` Frederic de Villamil
@ 2004-03-24 18:41 ` j.travis
2004-03-25 8:46 ` Cedric Blancher
0 siblings, 1 reply; 4+ messages in thread
From: j.travis @ 2004-03-24 18:41 UTC (permalink / raw)
To: netfilter
-Then why might one be inclined to use the '-m tcp' in a situation like
this? Clarity?
-Under what circumstances might '-m tcp' give added value?
> On Wed, 24 Mar 2004, j.travis wrote:
>
> > Is there any (functional) difference between these two statements?
> >
> > -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
> >
> > -A INPUT -p tcp --dport 80 -j ACCEPT
> >
>
> No. Absolutely not.
>
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: -m tcp
2004-03-24 18:41 ` j.travis
@ 2004-03-25 8:46 ` Cedric Blancher
0 siblings, 0 replies; 4+ messages in thread
From: Cedric Blancher @ 2004-03-25 8:46 UTC (permalink / raw)
To: j.travis; +Cc: netfilter
Le mer 24/03/2004 à 19:41, j.travis a écrit :
> -Then why might one be inclined to use the '-m tcp' in a situation like
> this? Clarity?
One does not need it. Once you've specified -p tcp, iptables deduce
automagically you're working with tcp match and then loads it.
> -Under what circumstances might '-m tcp' give added value?
None.
--
http://www.netexit.com/~sid/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
>> Hi! I'm your friendly neighbourhood signature virus.
>> Copy me to your signature file and help me spread!
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2004-03-25 8:46 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-03-24 18:28 -m tcp j.travis
2004-03-24 18:39 ` Frederic de Villamil
2004-03-24 18:41 ` j.travis
2004-03-25 8:46 ` Cedric Blancher
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox