Skip to contentSkip to conversation

udplite and ports

DISCUSSION Mart Frauenlob 3 participants 6 messages Mar 13, 2010 – Mar 16, 2010

lore
Share & tools
lore
#0 lore raw

Hello,

what am I missing, why is that command not working:

iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.

uname -a
Linux eris 2.6.33-eris-2010-03-06 #1 Sat Mar 6 01:36:52 CET 2010 i686 GNU/Linux

-p udplite -m multiport --ports 123,124 ... works.

Thanks for your help!

Best regards

Mart

#1 lore raw
Quoted 19 lines · Mart Frauenlob

Hello,

what am I missing, why is that command not working:

iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.

uname -a
Linux eris 2.6.33-eris-2010-03-06 #1 Sat Mar 6 01:36:52 CET 2010 i686 GNU/Linux

-p udplite -m multiport --ports 123,124 ... works.

Thanks for your help!

Quoted 8 lines

Best regards

Mart

To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Could you try option --dport instead of --destination-port ?

These options depends on the iptables librararied . You can do a "nm"
command on all the dynamic libraried to see whether it is supported . It could be a problem with configuration or right library might not be copied .

Thanks,
Ratheesh

#2 lore raw
Quoted 22 lines · On 14.03.2010 06:43, [email protected] wrote:
Quoted 9 lines · Mart Frauenlob

Hello,

what am I missing, why is that command not working:

iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.

Quoted 9 lines

uname -a
Linux eris 2.6.33-eris-2010-03-06 #1 Sat Mar 6 01:36:52 CET 2010 i686 GNU/Linux

-p udplite -m multiport --ports 123,124 ... works.

Thanks for your help!

Quoted 6 lines

Could you try option --dport instead of --destination-port ?

These options depends on the iptables librararied . You can do a "nm"
command on all the dynamic libraried to see whether it is supported . It could be a problem with configuration or right library might not be copied .

of course I tried --dport. Wonder why that should be different in regards of libraries.

#3 lore raw
In reply to Mart Frauenlob
Quoted 9 lines · On 13.03.2010 10:12, [email protected] wrote:

Hello,

what am I missing, why is that command not working:

iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.

Quoted 9 lines

uname -a
Linux eris 2.6.33-eris-2010-03-06 #1 Sat Mar 6 01:36:52 CET 2010 i686 GNU/Linux

-p udplite -m multiport --ports 123,124 ... works.

Thanks for your help!

No more than guessing from ratheesh?
I would have expect it to work like -p udp. Am I wrong? But there's no libxt_udplite.so. Is a kernel config option missing? Could not find any (all netfilter related is enabled).

What is wrong???

Thanks

Mart

#4 lore raw

Hello,

Quoted 6 lines · Mart Frauenlob
Quoted 6 lines

what am I missing, why is that command not working:

iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.

[...]

Quoted 1 line
Quoted 1 line

-p udplite -m multiport --ports 123,124 ... works.

According to changelogs, support for UDPLITE in multiport was added in iptables 1.3.8 (the man page does not seem to have been updated though).

Quoted 2 lines

I would have expect it to work like -p udp. Am I wrong? But there's no libxt_udplite.so.

--dport is an option of some "-m <protocol>" matches (implicit with "-p <protocol>") such as tcp, udp, sctp, dccp handled by libxt_<protocol>.so libraries. As you pointed out, there is no libxt_udplite.so, so no "-m udplite" match nor --dport option for UDPLITE.

#5 lore raw
Quoted 13 lines · Pascal Hambourg
Quoted 6 lines · Mart Frauenlob
Quoted 6 lines

what am I missing, why is that command not working:

iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.

[...]

Quoted 1 line
Quoted 1 line

-p udplite -m multiport --ports 123,124 ... works.

According to changelogs, support for UDPLITE in multiport was added in iptables 1.3.8 (the man page does not seem to have been updated though).

Quoted 7 lines
Quoted 2 lines

I would have expect it to work like -p udp. Am I wrong? But there's no libxt_udplite.so.

--dport is an option of some "-m <protocol>" matches (implicit with "-p <protocol>") such as tcp, udp, sctp, dccp handled by libxt_<protocol>.so libraries. As you pointed out, there is no libxt_udplite.so, so no "-m udplite" match nor --dport option for UDPLITE.

Thank you Pascal,

ok, it's simply not implemented...
It seemed somehow improbable to me, that support for udplite within conntrack, nat and multiport was added, but no protocol match. Relying on something not being in the man page *sigh* isn't assured to be correct.

Best regards

Mart