udplite and ports
Hello,
what am I missing, why is that command not working:
iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.
uname -a
Linux eris 2.6.33-eris-2010-03-06 #1 Sat Mar 6 01:36:52 CET 2010 i686 GNU/Linux
-p udplite -m multiport --ports 123,124 ... works.
Thanks for your help!
Best regards
Mart
Quoted 19 lines · Mart Frauenlob
Hello,
what am I missing, why is that command not working:
iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.uname -a
Linux eris 2.6.33-eris-2010-03-06 #1 Sat Mar 6 01:36:52 CET 2010 i686 GNU/Linux-p udplite -m multiport --ports 123,124 ... works.
Thanks for your help!
Quoted 8 lines
Best regards
Mart
To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Could you try option --dport instead of --destination-port ?
These options depends on the iptables librararied . You can do a "nm"
command on all the dynamic libraried to see whether it is supported . It could be a problem with configuration or right library might not be copied .
Thanks,
Ratheesh
Quoted 22 lines · On 14.03.2010 06:43, [email protected] wrote:
Quoted 9 lines · Mart Frauenlob
Hello,
what am I missing, why is that command not working:
iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.Quoted 9 lines
uname -a
Linux eris 2.6.33-eris-2010-03-06 #1 Sat Mar 6 01:36:52 CET 2010 i686 GNU/Linux-p udplite -m multiport --ports 123,124 ... works.
Thanks for your help!
Quoted 6 lines
Could you try option --dport instead of --destination-port ?
These options depends on the iptables librararied . You can do a "nm"
command on all the dynamic libraried to see whether it is supported . It could be a problem with configuration or right library might not be copied .
of course I tried --dport. Wonder why that should be different in regards of libraries.
Quoted 9 lines · On 13.03.2010 10:12, [email protected] wrote:
Hello,
what am I missing, why is that command not working:
iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.
Quoted 9 lines
uname -a
Linux eris 2.6.33-eris-2010-03-06 #1 Sat Mar 6 01:36:52 CET 2010 i686 GNU/Linux-p udplite -m multiport --ports 123,124 ... works.
Thanks for your help!
No more than guessing from ratheesh?
I would have expect it to work like -p udp. Am I wrong? But there's no libxt_udplite.so. Is a kernel config option missing? Could not find any (all netfilter related is enabled).
What is wrong???
Thanks
Mart
Hello,
Quoted 6 lines · Mart Frauenlob
Quoted 6 lines
what am I missing, why is that command not working:
iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.
[...]
Quoted 1 line
Quoted 1 line
-p udplite -m multiport --ports 123,124 ... works.
According to changelogs, support for UDPLITE in multiport was added in iptables 1.3.8 (the man page does not seem to have been updated though).
Quoted 2 lines
I would have expect it to work like -p udp. Am I wrong? But there's no libxt_udplite.so.
--dport is an option of some "-m <protocol>" matches (implicit with "-p <protocol>") such as tcp, udp, sctp, dccp handled by libxt_<protocol>.so libraries. As you pointed out, there is no libxt_udplite.so, so no "-m udplite" match nor --dport option for UDPLITE.
Quoted 13 lines · Pascal Hambourg
Quoted 6 lines · Mart Frauenlob
Quoted 6 lines
what am I missing, why is that command not working:
iptables -A INPUT -i eth2 -p udplite --destination-port 123 -j ACCEPT iptables v1.4.7: unknown option `--destination-port'
Try `iptables -h' or 'iptables --help' for more information.[...]
Quoted 1 line
Quoted 1 line
-p udplite -m multiport --ports 123,124 ... works.
According to changelogs, support for UDPLITE in multiport was added in iptables 1.3.8 (the man page does not seem to have been updated though).
Quoted 7 lines
Quoted 2 lines
I would have expect it to work like -p udp. Am I wrong? But there's no libxt_udplite.so.
--dport is an option of some "-m <protocol>" matches (implicit with "-p <protocol>") such as tcp, udp, sctp, dccp handled by libxt_<protocol>.so libraries. As you pointed out, there is no libxt_udplite.so, so no "-m udplite" match nor --dport option for UDPLITE.
Thank you Pascal,
ok, it's simply not implemented...
It seemed somehow improbable to me, that support for udplite within conntrack, nat and multiport was added, but no protocol match. Relying on something not being in the man page *sigh* isn't assured to be correct.
Best regards
Mart