local destination interface matching

[Nigel Kukard]

i got a quick question..... been doing a few tests with LOGing...

1. firstly by listing iptables rules with iptables -vnL i see that the default
   interface is set to  *  , what would be the correct way to set this in a
   script? (apart from leaving it out), i've seen you can use "any" or "+", not
   sure which is most sane. anyone?

2. is there a way i can match a packet that is going to hit a local port other
   than using an IP? i see in the LOG's its interface is just blank, is there
   a way to match this?

3. would anyone recommend against using the tcp-window-tracking code? i've read
   the mailing list a few months back & didn't really find any yes/no answers.



Kind Regards
Nigel

-- 
================================================================================

Contact Details
---------------
Name: Nigel Kukard
GSM Mobile: (+27) 082 564 2120
GSM Fax: (+27) 082 131 564 2120
Email: nkukard@linuxrulz.za.net

Organizations
-------------
 - LinuxRulz
     Url: http://www.linuxrulz.za.net
     Position: Owner
 - Linux Based Systems Design
     Url: http://www.lbsd.net
     Position: Systems Designer, Programmer
 - Lando Technologies
     Url: http://www.lando.co.za
     Position: Linux Systems/Network Administrator