From mboxrd@z Thu Jan 1 00:00:00 1970 From: Grant Taylor Subject: Re: iptables rules for cups printer discovery Date: Thu, 14 Aug 2008 21:14:27 -0500 Message-ID: <48A4E683.80206@riverviewtech.net> References: <19894-78618@sneakemail.com> <48A4DD48.3080004@riverviewtech.net> <48A4E340.1090305@riverviewtech.net> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: Mail List - Netfilter On 8/14/2008 9:04 PM, Jan Engelhardt wrote: > You can specify --rsrc/--rdest (patch just merged that documents > them). So the options did exist, but they were undocumented? > -A INPUT -d 192.168.0.255 -p udp --dport 161 -m recent --name snmp > --rsrc --set > > -A OUTPUT -p udp --sport 161 -m recent --name snmp --rdest --rcheck *nod* That is the general idea. So I take it that the default is --rsrc but you can specify --rdest and act on the destination IP for all options of recent, i.e. --update and --remove too? Grant. . . .