Re: iptables: can't set any ip address in rules

Hello Ulrich,
    thanks for the reply.
actually that was a typo, I did include -t nat in my actual command. I
corrected my post just now.

I issued the command you gave, the result is same.

>iptables -t filter -A INPUT 192.168.1.1 -j DROP

and then
>iptables -L

it showed as

Chain INPUT (Policy ACCEPT)
target           DROP
prot             all
opt               --
source          anywhere
destination    0.0.0.0

nothing in  FORWARD and OUTPUT chains.

regards
Salim

----- Original Message -----
From: "ulrich schwarz" <[email protected]>
To: "Salim" <[email protected]>
Cc: <[email protected]>
Sent: Monday, September 05, 2005 3:02 PM
Subject: Re: [NoCat] iptables: can't set any ip address in rules


> Salim wrote:
>
> > Hello all,
> >     I am not able to set any rule that contsin ip address in the
iptables.
> > For example I give this command
> >
> >
> >>iptables -t -A PREROUTING -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2
>
> hello salim,
>
> if you omit the table name after the -t parameter, AFAIK the filter
> table is assumed as default. in other words, the above statement gets
> interpreted as follows:
>
> iptables -t filter -A PREROUTING -d 1.1.1.1 -j DNAT --to-destination
2.2.2.2
>
> unfortunately, there is no prerouting chain in the filter table, this
> chain only exists in the nat and mangle tables.
>
> i suppose the command you are looking for is:
>
> iptables -t nat -A PREROUTING -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2
>
> i always loved this page for such issues, especially the diagram that
> shows how packets travel through the chains and tables:
>
>
http://iptables-tutorial.frozentux.net/iptables-tutorial.html#TRAVERSINGOFTA
BLES
>
> you can also try something simple like
>
> iptables -t filter -A INPUT -d 192.168.1.1 -j DROP
> iptables -L
>
> to see if your iptables work.
>
> [...]
> > I am using Redhat Linux 2.4.25
> > iptables v1.3.3
> > MIPS embedded system.
> >
> > I am confused. Any help will be greatly appreciated.
> >
> > regards
> > Salim
>
> HTH, regards,
>
> ulric