From mboxrd@z Thu Jan 1 00:00:00 1970 From: varun_saa@vsnl.net Subject: myfirewall help Date: Thu, 27 Jan 2005 15:13:59 +0500 Message-ID: <1fac6581fa72b3.1fa72b31fac658@vsnl.net> Mime-Version: 1.0 Content-Transfer-Encoding: 7BIT Return-path: Content-language: en Content-Disposition: inline List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org Hello, My server is Mandrake 10.1 eth0 is WAN with static IP connected to 512k DSL eth1 is LAN I am trying to write iptables rules and I am stuck with some error. My iptable file is as follows : # Generated by iptables-save v1.2.9 on Thu Oct 21 05:32:36 2004 *nat :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] -A POSTROUTING -o eth0 -j MASQUERADE COMMIT # Completed on Thu Oct 21 05:32:36 2004 # Generated by iptables-save v1.2.9 on Thu Oct 21 05:32:36 2004 *mangle :PREROUTING ACCEPT [32056:3889577] :INPUT ACCEPT [32010:3885659] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [31637:4617585] :POSTROUTING ACCEPT [31639:4618071] COMMIT # Completed on Thu Oct 21 05:32:36 2004 # Generated by iptables-save v1.2.9 on Thu Oct 21 05:32:36 2004 *filter :FORWARD ACCEPT [0:0] :INPUT DROP [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -j ACCEPT -A INPUT -s 127.0.0.1 -j ACCEPT -A INPUT -p tcp -m tcp -i eth1 -o eth0 --dport 3128 --sport 80 -j ACCEPT -A INPUT -p udp -m udp -i eth1 -o eth0 --dport 3128 --sport 80 -j ACCEPT COMMIT # Completed on Thu Oct 21 05:32:36 2004 When I am trying to save I get the following error : iptables-restore v1.2.9: Can't use -o with INPUT Error occurred at line: 25 Try `iptables-restore -h' or 'iptables-restore --help' for more information. Can anybody guide me ? Thanks in advance Varun