iptables --list not showing interfaces

[Ray Leach]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue 29 Jan 02 03:12, Jon Franklin wrote:
> I've set up a firewall using Bastille, and when I list the rules, things
> look confusing:
>
> # iptables --list
> Chain INPUT (policy DROP)
> target     prot opt source               destination
> DROP       tcp  --  anywhere             127.0.0.0/8
> ACCEPT     all  --  anywhere             anywhere           state
> RELATED,ESTABLISHED
> ACCEPT     all  --  anywhere             anywhere
> ACCEPT     all  --  anywhere             anywhere
> [snip]
>
> Notice how the last two rules look identical.  It's essentially
> indecipherable until I
> dig through the bastille script that sets it all up, and then I see that
> these rules are
> for input on 2 different interfaces (eth0 and lo).
>
> I haven't been able to find a way to dump the interfaces with the
> rules--basically the --list
> option is incomplete, IMO.
>
> Is there a way to do this?
>
Yes, use iptables -v -L

> Is this by design, or should I start hacking the source?  I can't
> imagine that I'd be the
> only person thinking this is a problem...
>
> I'm using iptables 1.2.4, btw.
>
> Thx!

- -- 
- ----------------------------------------------------------------------
Raymond Leach
Cell:+27-82-416-1410     Tel:+27-11-444-5006     Fax:+27-11-444-5007
eMail:raymondl@knowledgefactory.co.za
www:http://www.knowledgefactory.co.za
Make money while you sleep! Visit http://www.quickinfo247.com/175692
"No matter where you go, there you are ..."
- ----------------------------------------------------------------------
- -----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d- s:+ a- C++ UL++++/S++++/*++++ P+ L++ E-- W+++ !N !o !K w--- O-
M-- V-- !PS !PE Y-- PGP+++ t+@ 5- X+ R* tv+ b- DI++ D+ G e h* r++ z?
- ------END GEEK CODE BLOCK------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8VjoDF1I6guFUFA0RAinzAJ4ry2iFPWaI+AnJruW63xpzt+OqGQCg0RWr
jZs1UvNwoPNpy9j7K1xUTrs=
=aWZN
-----END PGP SIGNATURE-----