From: "Eljas Alakulppi" <Buzer@buzer.net>
To: Joey <Joey@web56.net>, IPTables <netfilter@vger.kernel.org>
Subject: Re: iptables-save ?
Date: Wed, 22 Oct 2008 11:42:23 +0300 [thread overview]
Message-ID: <op.uje3sxxkrtqp7s@chiyo.azt> (raw)
In-Reply-To: <002f01c93421$227ad450$67707cf0$@net>
Hey.
Yes, you do. They are the names of user-defined chains. If the chain does
not exists, it will try to find module which is named as the target.
nanoha:~# cat ipsavetest
# Generated by iptables-save v1.3.6 on Wed Oct 22 09:02:02 2008
*filter
:INPUT ACCEPT [349743786:266090081750]
:FORWARD ACCEPT [1243465676:1104963760281]
:OUTPUT ACCEPT [270142137:311874029150]
-A INPUT -s 10.5.1.4 -j moo
COMMIT
# Completed on Wed Oct 22 09:02:02 2008
nanoha:~# iptables-restore ipsavetest
iptables-restore v1.3.6: Couldn't load target
`moo':/lib/iptables/libipt_moo.so: cannot open shared object file: No such
file or directory
-Eljas Alakulppi
On Wed, 22 Oct 2008 11:35:27 +0300, Joey <Joey@web56.net> wrote:
> Hello All,
>
>
> I am considering writing my config out in an iptables-save format rather
> than my list which gets loaded in a perl script which takes a long time.
>
> In researching the file format I see # which is a comment, but what is a
> :
> like the below lines?
>
> Do I need these if I have my
>
> -A INPUT -j CIDR-ASIAN
>
> -A CIDR-ASIAN -s 58.14.0.0/255.254.0.0 -p tcp -j LOG --log-prefix
> "SPAM-BLOCK-CIDR-ASIAN"
>
> -A CIDR-ASIAN -s 58.14.0.0/255.254.0.0 -p tcp -m tcp --dport 25 -j DROP
>
>
> If I do need them, does the sequence matter of when I execute my
> :CIDR-ASIAN
> - [0:0] -vs- when I execute the above?
>
>
>
> # Generated by iptables-save v1.2.11 on Wed Oct 22 04:14:00 2008
>
> *filter
>
> :INPUT ACCEPT [5420870:1818203807]
>
> :FORWARD ACCEPT [0:0]
>
> :OUTPUT ACCEPT [6422769:3043272788]
>
> :CIDR-ASIAN - [0:0]
>
> :CIDR-CZECH - [0:0]
>
> :CIDR-DROP - [0:0]
>
> :CIDR-IISG - [0:0]
>
> :CIDR-INDIA-KOREA - [0:0]
>
> :CIDR-POLAND - [0:0]
>
> :CIDR-RUSSIA - [0:0]
>
> :CIDR-TURKEY - [0:0]
>
> :CIDR-UK - [0:0]
>
> :fail2ban-postfix - [0:0]
>
> :fail2ban-postfix-log - [0:0]
>
>
> Thanks,
>
>
> Joey
>
>
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
next prev parent reply other threads:[~2008-10-22 8:42 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-10-22 8:35 iptables-save ? Joey
2008-10-22 8:42 ` Eljas Alakulppi [this message]
2008-10-22 13:26 ` Joey
2008-10-22 13:39 ` Eljas Alakulppi
2008-10-22 13:56 ` Joey
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=op.uje3sxxkrtqp7s@chiyo.azt \
--to=buzer@buzer.net \
--cc=Joey@web56.net \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox