search for: multiport

Hi Folks: I am either using the multiport of the -m or --match option of iptables in correctly or there is a bug with it. Is anyone else using it with no problem? This is the way I am trying to use it: my_ports=21,25,80 iptables -t nat -A PREROUTING -i $wan_addr -p tcp -m multiport --dports $my_ports -j DNAT --to $my_internal_address...

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=451 Summary: ip6tables port range support in multiport modules is broken Product: iptables Version: unspecified Platform: i386 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P2 Component: ip6tables AssignedTo: laforge@netfil...

https://bugzilla.netfilter.org/show_bug.cgi?id=1233 Bug ID: 1233 Summary: Problem with import of small iptables rule sets with multiport match Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: iptables over nftable Assignee: pablo at netfilter.org...

Rather than have lots of folks downloading a version with a broken ''check'' command, I''ve released 1.4.1a that corrects the problem. Sorry for the back-to-back releases today... -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.sf.net Washington USA \ teastep@shorewall.net

Hello All, I have a strange problem regarding samba 3.0.37 I have samba server installed in the local network behind NAT, the router iptables are configured as follows: #samba $IPT -t nat -A PREROUTING -i $INET_IFACE -p udp -d $INET_IP -m multiport --dports 137,138 -j DNAT --to-destination $FILESERV $IPT -t nat -A PREROUTING -i $INET_IFACE -p tcp -d $INET_IP -m multiport --dports 139,145 -j DNAT --to-destination $FILESERV #samba $IPT -A FORWARD -p udp -m state --state NEW -i $INET_IFACE -d $FILESERV -m multiport --dports 137,138 -j AC...

...terisk? -----Original Message----- From: asterisk-users-admin@lists.digium.com [mailto:asterisk-users-admin@lists.digium.com] On Behalf Of woody+asterisk@solutionsfirst.com.au Sent: Monday, February 02, 2004 11:06 PM To: asterisk-users@lists.digium.com Subject: RE: [Asterisk-Users] Pictures of new multiport FXO/FXS from digum > -----Original Message----- > From: asterisk-users-admin@lists.digium.com > [mailto:asterisk-users-admin@lists.digium.com] On Behalf Of > thisemailaddressisbogus@risehigh.com > Sent: Saturday, 31 January 2004 8:56 > To: asterisk-users@lists.digium.com > S...

...several hot-plug/unplug operations and migrations. The fix is to let the management software instantiate ports at fixed locations and the host lets the guest know which 'id' to add a new port to. Since this is an intrusive change, and we don't want to support the current ABI, disable multiport support for now and re-enable it for the next merge window with the other changes. Signed-off-by: Amit Shah <amit.shah at redhat.com> --- drivers/char/virtio_console.c | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/drivers/char/virtio_console.c b/drivers/char/vi...

...several hot-plug/unplug operations and migrations. The fix is to let the management software instantiate ports at fixed locations and the host lets the guest know which 'id' to add a new port to. Since this is an intrusive change, and we don't want to support the current ABI, disable multiport support for now and re-enable it for the next merge window with the other changes. Signed-off-by: Amit Shah <amit.shah at redhat.com> --- drivers/char/virtio_console.c | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/drivers/char/virtio_console.c b/drivers/char/vi...

Hello everybody. I''m running linux 2.6.19 with nth match to alternatively snat outgoing connections to two different ip addresses for load balancing between two adsl lines: Here is: $IPTABLES -t nat -A POSTROUTING -s my_ip --protocol tcp -m multiport --dports 80,443 -m statistic --mode nth --every 2 -j SNAT --to adslA $IPTABLES -t nat -A POSTROUTING -s my_ip --protocol tcp -m multiport --dports 80,443 -j SNAT --to adslB Things are working pretty good, but some applications (https home banking for example), don''t work correctly (becaus...

If we're using multiport, there's no point in always creating a console port. Create the console port only if the host doesn't support multiport. Signed-off-by: Amit Shah <amit.shah at redhat.com> --- drivers/char/virtio_console.c | 32 +++++++++++++++----------------- 1 files changed, 15 insertions(+), 1...

If we're using multiport, there's no point in always creating a console port. Create the console port only if the host doesn't support multiport. Signed-off-by: Amit Shah <amit.shah at redhat.com> --- drivers/char/virtio_console.c | 32 +++++++++++++++----------------- 1 files changed, 15 insertions(+), 1...

Unfortunately there proved to be at least one bug which requires an ABI change, so we're best off not introducing multiport support until 2.6.35. While I generally left the multiport code paths intact, I really wanted to remove the ABI defines from the header, which meant some quite deep cuts. Signed-off-by: Rusty Russell <rusty at rustcorp.com.au> To: Amit Shah <amit.shah at redhat.com> --- drivers/char/...

Unfortunately there proved to be at least one bug which requires an ABI change, so we're best off not introducing multiport support until 2.6.35. While I generally left the multiport code paths intact, I really wanted to remove the ABI defines from the header, which meant some quite deep cuts. Signed-off-by: Rusty Russell <rusty at rustcorp.com.au> To: Amit Shah <amit.shah at redhat.com> --- drivers/char/...

...## aplicando as regras para proxy transparente #iptables -t nat -A PREROUTING -s 192.168.0.0/24 -p tcp --dport 80 -j REDIRECT --to-ports 8080 ### ### regras para rede interna (servicos permitidos) # iptables -t nat -A PREROUTING -p icmp -j ACCEPT ### Google Drive iptables -t nat -A PREROUTING -m multiport -p tcp -s 192.168.0.0/24 --dport 443,5222 -j ACCEPT iptables -t nat -A PREROUTING -m multiport -p udp -s 192.168.0.0/24 --dport 443,5222 -j ACCEPT ### iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 14 -j DNAT --to-destination 192.168.0.3 iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 3...

...all remaining traffic (outbound) /sbin/iptables -t mangle -A match-all -m physdev --physdev-in eth0 -j MARK --set-mark 0x44444446 /sbin/iptables -t mangle -A match-all -m physdev --physdev-in eth0 -j RETURN #Phones match (outbound) /sbin/iptables -t mangle -A match-chain-eth1-1:11 -p tcp -m multiport --port 4569 -j CLASSIFY --set-class 1:1006 /sbin/iptables -t mangle -A match-chain-eth1-1:11 -p tcp -m multiport --port 4569 -j RETURN /sbin/iptables -t mangle -A match-chain-eth1-1:11 -p udp -m multiport --port 4569 -j CLASSIFY --set-class 1:1006 /sbin/iptables -t mangle -A match-chain-eth1-1:1...

The 1.2.7 release of iptables has made an incompatible change in the syntax used to specify multiport matches. As a consequence, users upgrading to iptables 1.2.7 must set MULTIPORT=No in /etc/shorewall/shorewall.conf. I''ll have an updated firewall script available in the next day or two. -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net...

when multiport is off, virtio console invokes config access from irq context, config access is blocking on s390. Fix this up by scheduling work from config irq - similar to what we do for multiport configs. Signed-off-by: Michael S. Tsirkin <mst at redhat.com> --- Applies on top of "virtio_console: i...

when multiport is off, virtio console invokes config access from irq context, config access is blocking on s390. Fix this up by scheduling work from config irq - similar to what we do for multiport configs. Signed-off-by: Michael S. Tsirkin <mst at redhat.com> --- Applies on top of "virtio_console: i...

...-m conntrack --ctstate INVALID -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW AUDIT INVALID] " mine# -A ufw-logging-deny -m conntrack --ctstate INVALID -m limit --limit 3/min --limit-burst 10 -j RETURN 108,109c106,107 yours# -A ufw-user-input -s 192.168.0.0/16 -p udp -m multiport --dports 137,138 -m comment --comment "\'dapp_Samba\'" -j ACCEPT yours# -A ufw-user-input -s 192.168.0.0/16 -p tcp -m multiport --dports 139,445 -m comment --comment "\'dapp_Samba\'" -j ACCEPT mine# -A ufw-user-input -p udp -m multiport --dports 137,138 -m commen...

I''ve uploaded Beta 4. It corrects a bad bug involving exclusion in the hosts file. In addition, it contains the first release of a new Bridge/firewall implementation that uses the reduced-function physdev match found in kernel 3.6.20 and 3.6.21. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \