Re: iptables rules for cups printer discovery

Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx> · Thu, 14 Aug 2008 21:14:27 -0500

On 8/14/2008 9:04 PM, Jan Engelhardt wrote:

You can specify --rsrc/--rdest (patch just merged that documents 

them).

So the options did exist, but they were undocumented?

-A INPUT -d 192.168.0.255 -p udp --dport 161 -m recent --name snmp 

--rsrc --set

-A OUTPUT -p udp --sport 161 -m recent --name snmp --rdest --rcheck

*nod*  That is the general idea.

So I take it that the default is --rsrc but you can specify --rdest and 

act on the destination IP for all options of recent, i.e. --update and 

--remove too?

Grant. . . .
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html