Dotaz: iptables - nefunguji pravidla po upgrade distribuce

[Ja]

Ahoj, udelal jsem po upgrade distribuce a muj firewall skript prestal fungovat.

root@45:~# echo $INTERNAL_NETWORK $INTERNAL_MASK $INTERNAL_INTERFACE
192.168.1.0 255.255.255.0 eth0
root@45:~# iptables -A FORWARD -s ! "$INTERNAL_NETWORK/$INTERNAL_MASK" -o "$INTERNAL_INTERFACE" -m state --state ESTABLISHED -j ACCEPT;
Bad argument `192.168.1.0/255.255.255.0'
Try `iptables -h' or 'iptables --help' for more information.

nevite, kde se co zmenilo?
Manualova stranka se mi zda stejna.

Diky

[!] -s, --source address[/mask][,...]
Source specification. Address can be either a network name, a hostname, a network IP address (with
/mask), or a plain IP address. Hostnames will be resolved once only, before the rule is
submitted to the kernel. Please note that specifying any name to be resolved with a remote query such as
DNS is a really bad idea. The mask can be either a network mask or a plain num‐
ber, specifying the number of 1's at the left side of the network mask. Thus, a mask of 24 is
equivalent to 255.255.255.0. A "!" argument before the address specification inverts the
sense of the address. The flag --src is an alias for this option. Multiple addresses can be specified,
but this will expand to multiple rules (when adding with -A), or will cause multiple
rules to be deleted (with -D).

---

---

Odpovědi

[H0ax]

192.168.1.0/24

[Ja]

to me napadlo taky

root@45:~# iptables -A FORWARD -s ! "$INTERNAL_NETWORK/24" -o "$INTERNAL_INTERFACE" -m state --state ESTABLISHED -j ACCEPT;
Bad argument `192.168.1.0/24'
Try `iptables -h' or 'iptables --help' for more information.

[H0ax]

! -s "$INTERNAL_NETWORK/24"

[Ja]

Diky, vyreseno!

[michich]

Jaká je to verze iptables?

[Ja]

root@45:~# iptables -V
iptables v1.4.12

[michich]

Jo, tak to bude tou pozicí vykřičníku. Z changelogu pro 1.4.12:

option: remove last traces of intrapositional negation

[Ja]

Diky za vas cas a pomoc, vyreseno!

[tom]

A kdyz se to napise tak, jak je to v manu, tedy s '!' pred '-s', tak to zbasti?

Tomas

[Ja]

zbasti