Re: udplite and ports

[Pascal Hambourg <pascal.mail@plouf.fr.eu.org>]

Hello,

Mart Frauenlob a écrit :
>>
>> what am I missing, why is that command not working:
>>
>> iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT
>> iptables v1.4.7: unknown option `--destination-port'
>> Try `iptables -h' or 'iptables --help' for more information.
[...]
>> -p udplite -m multiport --ports 123,124 ... works.

According to changelogs, support for UDPLITE in multiport was added in
iptables 1.3.8 (the man page does not seem to have been updated though).

> I would have expect it to work like -p udp. Am I wrong?
> But there's no libxt_udplite.so.

--dport is an option of some "-m <protocol>" matches (implicit with "-p
<protocol>") such as tcp, udp, sctp, dccp handled by libxt_<protocol>.so
libraries. As you pointed out, there is no libxt_udplite.so, so no "-m
udplite" match nor --dport option for UDPLITE.