On Fri, Apr 26, 2002 at 10:40:03AM -0400, thus spake Ramin Alidousti:

> There is a big difference between 1024 and 1024: ...
> 
> > Try '0/0` instead of 'any/0'
> 
> Actually '-d 0/0' is equivalent to '' and also '-s 0/0' is
> equivalent to ''. So just remove them.

I found the cause of many of the problems when doing a line by line execution of the 
script. The "invalid 
port/service '1024:' specified" error seems to be related to the fact that you cannot 
use that designation on a line 
that also use the "multiport" match. That is,

$IPT -t nat -A POSTROUTING -p tcp -m multiport --destination-ports 143,993 -s 
192.168.0.0/24 --sport 1024: \
-d 10.0.0.1 -j SNAT --to 192.168.100.1

will result in the aforementioned error message from iptables, but removing the part:

--sport 1024:

will make iptables happy. Go figure. Now I'm only down to a handful of errors. Thanks 
for all of the responses.

geoffrey
-- 
+++++++++++++++++++++++++++++++++++
Santa Claus,
the Tooth Fairy,
Windows 2000 ...
Some things you just outgrow.
+++++++++++++++++++++++++++++++++++

Attachment: msg02337/pgp00000.pgp
Description: PGP signature

Reply via email to