From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?ISO-8859-1?Q?J=F6rg_Harmuth?= Subject: Re: iptables rules Date: Thu, 15 Sep 2005 18:23:55 +0200 Message-ID: <4329A01B.4020300@mnemon.de> References: <1123184190.21749.34.camel@ndspc131.p.n-dsi.com> <1123704837.3708.1.camel@ndspc131.p.n-dsi.com> <1126649450.4790.5.camel@ndspc131.p.n-dsi.com> <1126797736.4790.24.camel@ndspc131.p.n-dsi.com> <432992C0.2000404@mnemon.de> <1126798629.4790.26.camel@ndspc131.p.n-dsi.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1126798629.4790.26.camel@ndspc131.p.n-dsi.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org Peggy Kam wrote: > did the manpage gets changed recently? the iptables manpage that I see > states that: > > --port [port[,port]] > Match if the both the source and destination ports are equal to > each other and to one of the given ports. I see. You are referring to -m mport --port*s* (by the way, there is a typo or are you referring to another module ?), which is different from -m multiport --port*s* port[...] - which I was referring to. Your rule was ... -m multiport --ports 22,23,24,25 -j ACCEPT So I looked for multiport. HTH, Joerg