From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ted Kaczmarek Subject: Re: iptables with multiport problem Date: Tue, 05 Oct 2004 09:02:04 -0400 Sender: netfilter-bounces@lists.netfilter.org Message-ID: <1096981324.27468.76.camel@inyoureyes.linsolutions.com> References: <200410051250.i95CoY030305@securegate.mailserver.gajshield.com> Reply-To: tedkaz@optonline.net Mime-Version: 1.0 Content-Transfer-Encoding: 7BIT Return-path: In-reply-to: <200410051250.i95CoY030305@securegate.mailserver.gajshield.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: bruce Cc: netfilter@lists.netfilter.org On Tue, 2004-10-05 at 18:17 +0530, bruce wrote: > Hi all, > > I am working with linux firewall implementation > > > I am using iptables version v1.2.11 and linux kernal 2.4.27. > If multiport option comes with iptables(iptable rules are below), the > services are not working. But individual services are working properly. > The following filtering rules are not giving any syntatical errors. > I checked logs no info.. > > #/sbin/iptables -A FORWARD -i eth0 -o eth1 -p tcp -s 192.168.2.0/24 -m > multiport --dport 24,80 -m multiport --sport 0:65535 -d 192.168.1.2 -j > ACCEPT > > #/sbin/iptables -A FORWARD -i eth1 -o eth0 -p tcp -s 192.168.1.2 -m multiport > --sport 24,80 -d 192.168.2.0/24 -m multiport --dport 0:65535 -j ACCEPT > > Please give any solution or hints for the below problem. > Thanks > Bruce > I kind of remember multiport support coming via a patch. Also your 0:65535 is not multiport. Ted