Quote:
Originally Posted by linuxjamil
Dear All
My question is why -m tcp has been used in this line ?
-A INPUT -i eth0 -p tcp -m tcp -s 172.16.0.0/16 --dport 110 -j ACCEPT
Please respond.
|
Because the
tcp module has to be loaded if you want to use any of the matches it provides, such as the
--dport match used in what you posted. That said, this module gets automatically loaded whenever you need it, so you don't really need to specify it when you execute an iptables command. BTW, I'm moving this to
Software as it's not a security issue.
iptables problem
