Tell me more ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.
up vote 1 down vote favorite

I'm trying to figure out what that + sign means in a rule such as this:

-A FORWARD -i tun0+ -j ACCEPT

I'm pretty positive it relates to vpn. I noticed a /dev/net/tun interface and a tun0 in ifconfig, but for the sake of thoroughness, I want to know about that + sign. Anyone know anything?

share|improve this question
Ok, so it seems that the + is a wildcard that is mentioned under the spec of the -i flag. hmmm now to figure out why. – Realn0whereman Apr 12 '11 at 21:33
Is that really tun0+, and not tun+? As far as I know tun0+ would only match tun0 anyway, whereas tun+ would match tun0, tun1, tun2, … – Gilles Apr 12 '11 at 22:03
Yes it is, that's why I'm stumped. In the server config for openvpn, it is "dev tun0", so would openvpn create tun01 tun02 etc... for concurrent vpn connections? – Realn0whereman Apr 12 '11 at 22:37
dev tun0 will force creation of tun0 device. If you want to dynamically create tun devices and don't care which server uses which device, then use dev tun so tun0, tun1, tun2, ... be created subsequently and tun+ in iptables rules will match all of them. – forcefsck Apr 13 '11 at 13:12
@Realn0whereman: Where did you find this rule anyway? – Gilles Apr 13 '11 at 19:57
show 2 more comments

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.