[CentOS] combining iptables parameters

2009-10-29 Thread James B. Byrne
Message-ID: fac47fca0910281232x71fbf92cva80095483d210...@mail.gmail.com On: Wed, 28 Oct 2009 20:32:14 +0100, Marcus Moeller m...@marcus-moeller.de wrote: Hi all, is there a way to combine iptables parameters like: iptables -A OUTPUT -p UDP -p TCP -d $IP1 -d $IP2 ? man iptables ...

Re: [CentOS] combining iptables parameters

2009-10-29 Thread Marcus Moeller
Dear James. is there a way to combine iptables parameters like: iptables -A OUTPUT -p UDP -p TCP -d $IP1 -d $IP2 ? I should have better written something like: -A OUTPUT -p UDP OR -p TCP -d $IP1 OR -d $IP2 as that's what I was looking for. Sorry. Best Regards Marcus

Re: [CentOS] combining iptables parameters

2009-10-29 Thread Robert Spangler
On Wednesday 28 October 2009 16:36, Marcus Moeller wrote: Dear Ryan. is there a way to combine iptables parameters like: iptables -A OUTPUT -p UDP -p TCP -d $IP1 -d $IP2 ? Each of those parameters is called a match, in IPTables-speak. You can specify multiple matches in one

Re: [CentOS] combining iptables parameters

2009-10-29 Thread Ryan Lynch
On Thu, Oct 29, 2009 at 16:57, Robert Spangler mli...@zoominternet.net wrote: Even simpler; iptables -A OUTPUT -d $IP1 -j DROP iptables -A OUTPUT -d $IP2 -j DROP This will catch everything doesn't matter if its UDP or TCP or ICMP. I think you're missing the point of the original question:

[CentOS] combining iptables parameters

2009-10-28 Thread Marcus Moeller
Hi all, is there a way to combine iptables parameters like: iptables -A OUTPUT -p UDP -p TCP -d $IP1 -d $IP2 ? Best Regards Marcus ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] combining iptables parameters

2009-10-28 Thread Ryan Lynch
On Wed, Oct 28, 2009 at 15:32, Marcus Moeller m...@marcus-moeller.de wrote: is there a way to combine iptables parameters like: iptables -A OUTPUT -p UDP -p TCP -d $IP1 -d $IP2 ? Each of those parameters is called a match, in IPTables-speak. You can specify multiple matches in one rule, but

Re: [CentOS] combining iptables parameters

2009-10-28 Thread Marcus Moeller
Dear Ryan. is there a way to combine iptables parameters like: iptables -A OUTPUT -p UDP -p TCP -d $IP1 -d $IP2 ? Each of those parameters is called a match, in IPTables-speak. You can specify multiple matches in one rule, but all matches are combined with an implicit logical AND. There

Re: [CentOS] combining iptables parameters

2009-10-28 Thread Ryan Lynch
On Wed, Oct 28, 2009 at 16:36, Marcus Moeller m...@marcus-moeller.de wrote: You would have to specify the required match space across multiple rules, maybe something like this:  iptables -A OUTPUT -p UDP -d $IP1-j DROP  iptables -A OUTPUT -p TCP -d $IP1 -j DROP  iptables -A OUTPUT -p UDP -d

Re: [CentOS] combining iptables parameters

2009-10-28 Thread Marcus Moeller
Dear Ryan.  iptables -A OUTPUT -p UDP -d $IP1-j DROP  iptables -A OUTPUT -p TCP -d $IP1 -j DROP  iptables -A OUTPUT -p UDP -d $IP2 -j DROP  iptables -A OUTPUT -p TCP -d $IP2 -j DROP That's what I am doing atm. Thanks for the update. BTW, if you have some complex chain of action logic