
iptables man Pages D-19
DIAGNOSTICS
Various error messages are printed to standard error. The
exit code is 0 for correct functioning. Errors which
appear to be caused by invalid or abused command line
parameters cause an exit code of 2, and other errors cause
an exit code of 1.
BUGS
Check is not implemented (yet).
COMPATIBILITY WITH IPCHAINS
This iptables is very similar to ipchains by Rusty Rus
sell. The main difference is that the chains INPUT and
OUTPUT are only traversed for packets coming into the
local host and originating from the local host respec
tively. Hence every packet only passes through one of the
three chains; previously a forwarded packet would pass
through all three.
The other main difference is that -i refers to the input
interface; -o refers to the output interface, and both are
available for packets entering the FORWARD chain.
iptables is a pure packet filter when using the default
`filter' table, with optional extension modules. This
its size. Default is 0
--ulog-qthreshold <size>
Number of packet to queue inside kernel. Setting
this value to, e.g. 10 accumulates ten packets
inside the kernel and transmits them as one netlink
multpart message to userspace. Default is 1 (for
backwards compatibility)
DIAGNOSTICS
Various error messages are printed to standard error. The
Comentarios a estos manuales