From mboxrd@z Thu Jan 1 00:00:00 1970 From: Unknown Subject: Re: [despammed] -i and -o options for iptables FORWARD chain Date: Fri, 2 Jan 2004 11:05:24 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <7544.88308816708$1073059859@news.gmane.org> References: <7A3B4AA360FDEF448F3390421FC8D731012C6B04@coxhpexg.coxhp.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: From: Alistair Tonner <> In-Reply-To: <7A3B4AA360FDEF448F3390421FC8D731012C6B04@coxhpexg.coxhp.com> Content-Disposition: inline Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: bmcdowell@coxhealthplans.com, netfilter@lists.netfilter.org On January 2, 2004 10:13 am, bmcdowell@coxhealthplans.com wrote: > Actually, couldn't this be just a 2.6.x change? (I never saw the rules go > by...) I thought I saw a message go by earlier to that effect. Something > about the syntax and needing '--physdev' and '-i' both, or something? > > I could search the archives, I guess, but instead I suggest Gonya give that > a go. > Userspace tools need to be recompiled from 2.4.x kenels to 2.6.0 I got weird results switching. Recompile fixed the problems. Alistair > > Bob > -----Original Message----- > From: netfilter-admin@lists.netfilter.org > [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Antony Stone > Sent: Friday, January 02, 2004 8:03 AM > To: netfilter@lists.netfilter.org > Subject: Re: [despammed] -i and -o options for iptables FORWARD chain > > On Friday 02 January 2004 1:30 pm, Andreas Kretschmer wrote: > > am Wed, dem 31.12.2003, um 15:36:34 -0800 mailte Gongya Yu folgendes: > > > Hi, I just updated Linux kernel to 2.6.0 with iptables and ebtables > > > enabled. > > > > I'm using iptables on 2.4.x, possible there are differences with 2.6.x. > > > > > But iptables ignores -i and -o options for FORWARD chain. Wheneneve I > > > use something like -i eth0 or -o eth0, the rule is just ignored. > > > > RTFM! > > > > -i is only for INPUT, FORWARD and PREROUTING > > -o is only for FORWARD, OUTPUT and POSTROUTING > > Are you suggesting that -i and -o cannot be used in FORWARD? As far as I > can see the syntax of the rule Gonya posted is perfectly okay. > > Antony.