iptables syntax issue

[Mike Scott]

Hi all. I'm trying to get to grips with iptables, but I'm flummoxed by this:

iptables> sudo iptables --table nat -D PREROUTING -p tcp --source
\!192.168.0.0/24 --dport ssh -j REDIRECT --to-port 20022
iptables v1.8.7 (nf_tables): host/network `!192.168.0.0' not found
Try `iptables -h' or 'iptables --help' for more information.


So what is the syntax to make a rule match sources other than the given
please?


Thanks.

[Mike Scott]

Post by Mike Scott
iptables> sudo iptables --table nat -D PREROUTING -p tcp --source
\!192.168.0.0/24 --dport ssh -j REDIRECT --to-port 20022
iptables v1.8.7 (nf_tables): host/network `!192.168.0.0' not found
Try `iptables -h' or 'iptables --help' for more information.
So what is the syntax to make a rule match sources other than the given
please?
Thanks.

Grrr. The online man page (https://linux.die.net/man/8/iptables) I was
looking at is wrong. It should be ! -s <address> not -s !<address>

Not good.

[candycanearter07]

Post by Mike Scott

Post by Mike Scott
iptables> sudo iptables --table nat -D PREROUTING -p tcp --source
\!192.168.0.0/24 --dport ssh -j REDIRECT --to-port 20022
iptables v1.8.7 (nf_tables): host/network `!192.168.0.0' not found
Try `iptables -h' or 'iptables --help' for more information.
So what is the syntax to make a rule match sources other than the given
please?
Thanks.

Grrr. The online man page (https://linux.die.net/man/8/iptables) I was
looking at is wrong. It should be ! -s <address> not -s !<address>
Not good.

Try emailing the webmaster?

[Mike Scott]

Post by candycanearter07
Try emailing the webmaster?

Done, but as they don't give contact info on their pages I assume
they're not welcoming input.

[Mike Scott]

Post by Mike Scott

Post by candycanearter07
Try emailing the webmaster?

Done, but as they don't give contact info on their pages I assume
they're not welcoming input.

And the email to ***@... has just bounced (Operation timed out).
They really don't seem to want people to talk to them.

[George Neuner]

On Mon, 9 Dec 2024 11:50:03 +0000, Mike Scott

Post by Mike Scott

Post by Mike Scott

Post by candycanearter07
Try emailing the webmaster?

Done, but as they don't give contact info on their pages I assume
they're not welcoming input.

They really don't seem to want people to talk to them.

The maintainer's address is web at die dot net
It's right on the main page.

[Marc Haber]

Post by Mike Scott
iptables> sudo iptables --table nat -D PREROUTING -p tcp --source
\!192.168.0.0/24 --dport ssh -j REDIRECT --to-port 20022
iptables v1.8.7 (nf_tables): host/network `!192.168.0.0' not found
Try `iptables -h' or 'iptables --help' for more information.
So what is the syntax to make a rule match sources other than the given
please?

I haven't used iptables directly in ages. Did you try putting
whitespace between the ! and the network?

Greetings
Marc

[Mike Scott]

Post by Marc Haber

Post by Mike Scott
iptables> sudo iptables --table nat -D PREROUTING -p tcp --source
\!192.168.0.0/24 --dport ssh -j REDIRECT --to-port 20022
iptables v1.8.7 (nf_tables): host/network `!192.168.0.0' not found
Try `iptables -h' or 'iptables --help' for more information.
So what is the syntax to make a rule match sources other than the given
please?

I haven't used iptables directly in ages. Did you try putting
whitespace between the ! and the network?
Greetings
Marc

Thanks for the reply.

I found the man page I looked at was wrong. The syntax is /not/
-s ! <address>, rather ! -s <address>.