* -m tcp @ 2004-03-24 18:28 j.travis 2004-03-24 18:39 ` Frederic de Villamil 0 siblings, 1 reply; 4+ messages in thread From: j.travis @ 2004-03-24 18:28 UTC (permalink / raw) To: netfilter Is there any (functional) difference between these two statements? -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT -A INPUT -p tcp --dport 80 -j ACCEPT ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: -m tcp 2004-03-24 18:28 -m tcp j.travis @ 2004-03-24 18:39 ` Frederic de Villamil 2004-03-24 18:41 ` j.travis 0 siblings, 1 reply; 4+ messages in thread From: Frederic de Villamil @ 2004-03-24 18:39 UTC (permalink / raw) To: j.travis; +Cc: netfilter On Wed, 24 Mar 2004, j.travis wrote: > Is there any (functional) difference between these two statements? > > -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT > > -A INPUT -p tcp --dport 80 -j ACCEPT > No. Absolutely not. -- http://www.seclab.jp ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: -m tcp 2004-03-24 18:39 ` Frederic de Villamil @ 2004-03-24 18:41 ` j.travis 2004-03-25 8:46 ` Cedric Blancher 0 siblings, 1 reply; 4+ messages in thread From: j.travis @ 2004-03-24 18:41 UTC (permalink / raw) To: netfilter -Then why might one be inclined to use the '-m tcp' in a situation like this? Clarity? -Under what circumstances might '-m tcp' give added value? > On Wed, 24 Mar 2004, j.travis wrote: > > > Is there any (functional) difference between these two statements? > > > > -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT > > > > -A INPUT -p tcp --dport 80 -j ACCEPT > > > > No. Absolutely not. > ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: -m tcp 2004-03-24 18:41 ` j.travis @ 2004-03-25 8:46 ` Cedric Blancher 0 siblings, 0 replies; 4+ messages in thread From: Cedric Blancher @ 2004-03-25 8:46 UTC (permalink / raw) To: j.travis; +Cc: netfilter Le mer 24/03/2004 à 19:41, j.travis a écrit : > -Then why might one be inclined to use the '-m tcp' in a situation like > this? Clarity? One does not need it. Once you've specified -p tcp, iptables deduce automagically you're working with tcp match and then loads it. > -Under what circumstances might '-m tcp' give added value? None. -- http://www.netexit.com/~sid/ PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE >> Hi! I'm your friendly neighbourhood signature virus. >> Copy me to your signature file and help me spread! ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2004-03-25 8:46 UTC | newest] Thread overview: 4+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2004-03-24 18:28 -m tcp j.travis 2004-03-24 18:39 ` Frederic de Villamil 2004-03-24 18:41 ` j.travis 2004-03-25 8:46 ` Cedric Blancher
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox