Rules don't Work

Wayne Topa wtopa@dmcom.net
Fri, 5 Oct 2001 08:46:20 -0400


Isamp(isamp@terra.com.br) is reported to have said:
> Hi All,
> 
> 
> Please, why this rules don't accepted by iptables ?
> 
> 
> $IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags ALL FIN,URG,PSH \
> 	-m limit --limit 5/minute -j LOG --log-level $LOG_LEVEL --log-prefix
> "NMAP-XMAS:"
> $IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP
> 
> $IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags SYN,RST SYN,RST \
> 	-m limit --limit 5/minute -j LOG --log-level $LOG_LEVEL --log-prefix
> "SYN/RST:"
> $IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags SYN,RST SYN,RST -j DROP
> 
> $IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags SYN,FIN SYN,FIN \
> 	-m limit --limit 5/minute -j LOG --log-level $LOG_LEVEL --log-prefix
> "SYN/FIN:"
> $IPTABLES -A CHECK_FLAGS -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP
> 

Do you have a line like below at the beginning of your script?

 $IPTABLES -N CHECK_FLAGS

-- 
<-------- The information went data way --------->
_______________________________________________________