-o in iptables é para especificar a interface para OUTPUT, FORWARD e POSTROUTING Correct?

1

Lendo em detalhes sobre o iptables / netfilter aqui , quando eu li sobre o -o argument:

"Indicates the interface through which the outgoing packets are sent through the INPUT, FORWARD, and PREROUTING chain."

Isto parece-me estar errado, pois escreveram a mesma coisa para o argumento -i .

Parece-me que deveria ser:

"Indicates the interface through which the outgoing packets are sent through the OUTPUT, FORWARD, and POSTROUTING chain."

correto?

    
por leeand00 30.10.2016 / 17:39

1 resposta

3

sim, man page debian;

   [!] -o, --out-interface name
          Name  of  an  interface via which a packet is going to be sent (for packets entering the FORWARD, OUTPUT and POSTROUTING chains).  When the "!" argument is used before the
          interface name, the sense is inverted.  If the interface name ends in a "+", then any interface which begins with this name will match.  If this  option  is  omitted,  any
          interface name will match.
    
por 30.10.2016 / 17:48