Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This rule work (the packet is added to the queue):

iptables -A INPUT -p tcp -j NFQUEUE --queue-num 0

However , this rule dosnt work (nothing added to the queue):

iptables -A INPUT -m physdev --physdev-in eth1 -p tcp -j NFQUEUE --queue-num 0

Any idea why in input it dosnt add packets to the queue?

No additional rules. I ran before

iptables -X
iptables -F
share|improve this question
Is here another rule above this rule which deals with the packet and is a final target like DROP, ACCEPT or REJECT? Then this rule will never be hit. – Alexander Janssen Oct 3 '12 at 16:38
@Alex updated question. no other rules. – Avihai Marchiano Oct 3 '12 at 16:40
I think that the physdev match is solely for bridges. Try using a simple -i eth1 instead. – Alexander Janssen Oct 3 '12 at 16:43
You mention a bridge only in your third example, eth1 is a bridge port in the second example right? – Zoredache Oct 3 '12 at 16:47
@Alex can you write it as an answer in order to mark it as correct. – Avihai Marchiano Oct 3 '12 at 16:52
up vote 2 down vote accepted

As my comment seemed to be correct, here again:

I think the physdev match is only for bridges. Try using a simple -i eth1 instead.

Glad I could help.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.