Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i want use iptables to filter tftp client's OUTPUT package, but failed, could you help me?

My rules:

iptables -A OUTPUT -m udp -p udp --dport 69 -j NFQUEUE
iptables -A OUTPUT -m string --algo kmp --string "nessus" -j NFQUEUE

The client's OUTPUT package is mostly like this:

No.     Time        Source                Destination           Protocol Info
      9 1.432738         TFTP     Read Request, File: nessus713610685\000, Transfer type: netascii\000
Frame 9 (69 bytes on wire, 69 bytes captured)
Ethernet II, Src: Vmware_bc:00:59 (00:0c:29:bc:00:59), Dst: 60:a4:4c:34:bd:ac (60:a4:4c:34:bd:ac)
Internet Protocol, Src: (, Dst: (
User Datagram Protocol, Src Port: 4239 (4239), Dst Port: tftp (69)
    Source port: 4239 (4239)
    Destination port: tftp (69)
    Length: 35
    Checksum: 0x3d14 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Trivial File Transfer Protocol
    [Source File: nessus713610685]
    Opcode: Read Request (1)
    Source File: nessus713610685
    Type: netascii
share|improve this question
What do you mean by it failed? Are you using libnetfilter_queue on your program to filter the packet? – GnP Jul 10 '13 at 21:28
Hi, it failed means the packages that sent by tftp wasn't be filter by iptables. – user180412 Aug 1 '13 at 7:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.