2

Reading in detail about iptables / netfilter here, when I read about the -o argument:

"Indicates the interface through which the outgoing packets are sent through the INPUT, FORWARD, and PREROUTING chain."

This seems to me to be wrong as they have written the same thing for the -i argument.

It seems to me it should instead be:

"Indicates the interface through which the outgoing packets are sent through the OUTPUT, FORWARD, and POSTROUTING chain."

correct?

Improve this question

1 Answer 1

Reset to default
4

yep, man page debian;

   [!] -o, --out-interface name
          Name  of  an  interface via which a packet is going to be sent (for packets entering the FORWARD, OUTPUT and POSTROUTING chains).  When the "!" argument is used before the
          interface name, the sense is inverted.  If the interface name ends in a "+", then any interface which begins with this name will match.  If this  option  is  omitted,  any
          interface name will match.
Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.