So, when you specify an input or an output interface in an iptables rule, I know you can use a + as a wildcard, so ppp+ will match all of your ppp interfaces.

But I'd like a rule to apply to my eth0 and eth1 interfaces while ignoring all other ethernet interfaces. Rusty's Packet Filtering HOWTO doesn't specify any syntax for it. It's not possible to give multiple -i or -o flags, and splitting it in to seperate rules for each interface is awkward at best.

I've tried comma separated interfaces by running `iptables -A INPUT -i eth0,eth1 -j LOG`, but it doesn't log any traffic to eth0, so I'm guessing iptables is looking for an interface named "eth0,eth1". And, of course, space separating the interface names just gives a bad argument error.

So, is it possible to have iptables match two or more interfaces in a single rule?

--
Pete
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to