iptperl-general

[Iptperl-general] Problem with tcp-flags - option

[Frank S. <fr...@sc...>]

hi all,

when i start my script i get the following error-message:

#############################################################
tcp-flags: field unknown at ./SITCo-Firewall line 320.
#############################################################

this are the lines, which causes the error:

##############################################################
%rule3 = ( %rule3, 'tcp-flags' => { mask => [ 'SYN','ACK' ] , comp => [
'SYN' ], inv => [ 'ACK' ]  } );

$filter->append_entry("OUTPUT",\%rule3) || die $!;
##############################################################

i tried many things and read the man-page serveral times, but i cant
find my mistake. Actually i try to find something similar to the
iptables-option "! --syn". Could anybody give me an Example.(I know,
this bitmask wouldnt make sense at all - it's only for testing the
syntax)

thanks for help

frank
-- 
Frank Schreiner                                 90403 Nürnberg	
IT Consulting					Tel.:  0911/5975546
Rosental 23					Mobil: 0911/5975547

Re: [Iptperl-general] Problem with tcp-flags - option

[Derrik P. <dp...@ds...>]

Frank Schreiner wrote:
> hi all,
> 
> when i start my script i get the following error-message:
> 
> #############################################################
> tcp-flags: field unknown at ./SITCo-Firewall line 320.
> #############################################################
> 
> this are the lines, which causes the error:
> 
> ##############################################################
> %rule3 = ( %rule3, 'tcp-flags' => { mask => [ 'SYN','ACK' ] , comp => [
> 'SYN' ], inv => [ 'ACK' ]  } );
> 
> $filter->append_entry("OUTPUT",\%rule3) || die $!;
> ##############################################################

You have to specify 'protocol' => "tcp" somewhere in there, so that the 
module for the TCP protocol match gets loaded to handle that option.

--
Derrik Pates
dp...@ds...