LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-22-2013, 05:41 PM   #1
Armann
Member
 
Registered: May 2013
Location: Iceland
Distribution: RHEL/Fedora
Posts: 38

Rep: Reputation: Disabled
Question Iptables - http module question.


Why do some people load the tcp module and some people don't ?

iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
Then another one says:
iptables -A INPUT -p tcp --dport 80 -j ACCEPT

From what I have read -m stands for module, what are the advantages from using -m tcp ?
Thanks - The noob.
 
Old 05-23-2013, 11:50 AM   #2
Ygrex
Member
 
Registered: Nov 2004
Location: Russia (St.Petersburg)
Distribution: Debian
Posts: 666

Rep: Reputation: 68
no advantage, it is loaded implicitly
 
1 members found this post helpful.
Old 05-23-2013, 12:17 PM   #3
tux111
Member
 
Registered: Oct 2012
Location: Germany
Distribution: Xubuntu
Posts: 81

Rep: Reputation: Disabled
The TCP module is loaded automatically because protocol TCP is specified.

This section will describe the matches that are loaded implicitly. Implicit matches are implied, taken for granted, automatic. For example when we match on --protocol tcp without any further criteria. There are currently three types of implicit matches for three different protocols. These are TCP matches, UDP matches and ICMP matches. The TCP based matches contain a set of unique criteria that are available only for TCP packets. UDP based matches contain another set of criteria that are available only for UDP packets. And the same thing for ICMP packets. On the other hand, there can be explicit matches that are loaded explicitly. Explicit matches are not implied or automatic, you have to specify them specifically. For these you use the -m or --match option, which we will discuss in the next section.
http://www.faqs.org/docs/iptables/matches.html (6.4.2 Implicit matches)
 
1 members found this post helpful.
Old 05-23-2013, 02:48 PM   #4
Armann
Member
 
Registered: May 2013
Location: Iceland
Distribution: RHEL/Fedora
Posts: 38

Original Poster
Rep: Reputation: Disabled
Thanks for the answers.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: The Core HTTP Module in Nginx LXer Syndicated Linux News 0 07-11-2011 11:41 AM
question about iptables extension module ryanux Linux - Security 1 06-13-2004 11:44 PM
iptables and http alaios Linux - Security 5 06-09-2004 02:31 AM
Iptables question: a module named ip_tables already exists... lucastic Linux - Networking 2 12-14-2003 07:40 AM
IPtables Log Analyzer from http://www.gege.org/iptables/ brainlego Linux - Software 0 08-11-2003 06:08 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 09:10 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration