From mboxrd@z Thu Jan  1 00:00:00 1970
From: "Eljas Alakulppi" <Buzer@buzer.net>
Subject: Re: iptables-save ?
Date: Wed, 22 Oct 2008 11:42:23 +0300
Message-ID: <op.uje3sxxkrtqp7s@chiyo.azt>
References: <002f01c93421$227ad450$67707cf0$@net>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <netfilter-owner@vger.kernel.org>
In-Reply-To: <002f01c93421$227ad450$67707cf0$@net>
Sender: netfilter-owner@vger.kernel.org
List-ID: <netfilter.vger.kernel.org>
Content-Type: text/plain; format="flowed"; delsp="yes"; charset="us-ascii"
To: Joey <Joey@web56.net>, IPTables <netfilter@vger.kernel.org>

Hey.

Yes, you do. They are the names of user-defined chains. If the chain does  
not exists, it will try to find module which is named as the target.

nanoha:~# cat ipsavetest
# Generated by iptables-save v1.3.6 on Wed Oct 22 09:02:02 2008
*filter
:INPUT ACCEPT [349743786:266090081750]
:FORWARD ACCEPT [1243465676:1104963760281]
:OUTPUT ACCEPT [270142137:311874029150]
-A INPUT -s 10.5.1.4 -j moo
COMMIT
# Completed on Wed Oct 22 09:02:02 2008
nanoha:~# iptables-restore ipsavetest
iptables-restore v1.3.6: Couldn't load target  
`moo':/lib/iptables/libipt_moo.so: cannot open shared object file: No such  
file or directory


-Eljas Alakulppi

On Wed, 22 Oct 2008 11:35:27 +0300, Joey <Joey@web56.net> wrote:

> Hello All,
>
>
> I am considering writing my config out in an iptables-save format rather
> than my list which gets loaded in a perl script which takes a long time.
>
> In researching the file format I see # which is a comment, but what is a  
> :
> like the below lines?
>
> Do I need these if I have my
>
> -A INPUT -j CIDR-ASIAN
>
> -A CIDR-ASIAN -s 58.14.0.0/255.254.0.0 -p tcp -j LOG --log-prefix
> "SPAM-BLOCK-CIDR-ASIAN"
>
> -A CIDR-ASIAN -s 58.14.0.0/255.254.0.0 -p tcp -m tcp --dport 25 -j DROP
>
>
> If I do need them, does the sequence matter of when I execute my  
> :CIDR-ASIAN
> - [0:0] -vs- when I execute the above?
>
>
>
> # Generated by iptables-save v1.2.11 on Wed Oct 22 04:14:00 2008
>
> *filter
>
> :INPUT ACCEPT [5420870:1818203807]
>
> :FORWARD ACCEPT [0:0]
>
> :OUTPUT ACCEPT [6422769:3043272788]
>
> :CIDR-ASIAN - [0:0]
>
> :CIDR-CZECH - [0:0]
>
> :CIDR-DROP - [0:0]
>
> :CIDR-IISG - [0:0]
>
> :CIDR-INDIA-KOREA - [0:0]
>
> :CIDR-POLAND - [0:0]
>
> :CIDR-RUSSIA - [0:0]
>
> :CIDR-TURKEY - [0:0]
>
> :CIDR-UK - [0:0]
>
> :fail2ban-postfix - [0:0]
>
> :fail2ban-postfix-log - [0:0]
>
>
> Thanks,
>
>
> Joey
>
>
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html



-- 
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/