NetFilter
[Top] [All Lists]

Re: Help on Iptables

To: netfilter@lists.netfilter.org
Subject: Re: Help on Iptables
From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
Date: Sat, 16 Dec 2006 20:20:11 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <1166288655.4584270fe0f14@webmail.yanbulink.net>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Organization: Plouf !
References: <1166288655.4584270fe0f14@webmail.yanbulink.net>
Sender: netfilter-bounces@lists.netfilter.org
User-agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
Hello,

wlagmay@yanbulink.net a écrit :

I just want to know How am I going to do a blocking of multiple ports on a
single line let say port 700 to 800.

Im trying this command but it is not working

iptables -A OUTPUT -p tcp -m state --state NEW -m tcp --dport 700-800 -j DROP
iptables -A OUTPUT -p tcp -m state --state NEW -m tcp --dport 700 --to 800 -j
DROP

man iptables says the port range syntax in port matches is "700:800". The port range syntax "700-800" is used only in NAT targets.


<Prev in Thread] Current Thread [Next in Thread>