Rules don't Work

[Isamp]

Hi All,


Please, why this rules don't accepted by iptables ?


$IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags ALL FIN,URG,PSH \
	-m limit --limit 5/minute -j LOG --log-level $LOG_LEVEL --log-prefix
"NMAP-XMAS:"
$IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP

$IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags SYN,RST SYN,RST \
	-m limit --limit 5/minute -j LOG --log-level $LOG_LEVEL --log-prefix
"SYN/RST:"
$IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags SYN,RST SYN,RST -j DROP

$IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags SYN,FIN SYN,FIN \
	-m limit --limit 5/minute -j LOG --log-level $LOG_LEVEL --log-prefix
"SYN/FIN:"
$IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP


-- Isamp