Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

This rule work (the packet is added to the queue):

iptables -A INPUT -p tcp -j NFQUEUE --queue-num 0

However , this rule dosnt work (nothing added to the queue):

iptables -A INPUT -m physdev --physdev-in eth1 -p tcp -j NFQUEUE --queue-num 0

Any idea why in input it dosnt add packets to the queue?

No additional rules. I ran before

iptables -X
iptables -F
share|improve this question
    
Is here another rule above this rule which deals with the packet and is a final target like DROP, ACCEPT or REJECT? Then this rule will never be hit. –  Alexander Janssen Oct 3 '12 at 16:38
    
@Alex updated question. no other rules. –  Avihai Marchiano Oct 3 '12 at 16:40
2  
I think that the physdev match is solely for bridges. Try using a simple -i eth1 instead. –  Alexander Janssen Oct 3 '12 at 16:43
    
You mention a bridge only in your third example, eth1 is a bridge port in the second example right? –  Zoredache Oct 3 '12 at 16:47
    
@Alex can you write it as an answer in order to mark it as correct. –  Avihai Marchiano Oct 3 '12 at 16:52
add comment

1 Answer 1

up vote 2 down vote accepted

As my comment seemed to be correct, here again:

I think the physdev match is only for bridges. Try using a simple -i eth1 instead.

Glad I could help.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.