Problem with iptables script

[Andrew Kaplan]

Hi there --

I am trying to get an iptables script to run, but have run into some errors whenever I try to execute it. The error messages that are showing up on-screen are shown below:

[+] Setting up INPUT chain...
Bad argument `tcp'
Try `iptables -h' or 'iptables --help' for more information.
Bad argument `tcp'
Try `iptables -h' or 'iptables --help' for more information.
Bad argument `tcp'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.8: Can't use -i with OUTPUT

Try `iptables -h' or 'iptables --help' for more information.
Bad argument `5666'
Try `iptables -h' or 'iptables --help' for more information.
Bad argument `5666'
Try `iptables -h' or 'iptables --help' for more information.

I have included a copy of the script in this e-mail. There is a command syntax error here, but I am not sure what it is. Can someone lend a hand? Thanks.

[Ivan Ferreira]

I think that your problem is that you did not configured the INT_NET variable, so the command expects to be:

$IPTABLES -A INPUT -i eth0 -p tcp -s $INT_NET -p tcp

But as INT_NET is empty, you get:

$IPTABLES -A INPUT -i eth0 -p tcp -s -p tcp

Try configuring INT_NET first.

[palaniappan.sp]

Hi,
You didn't define the ipddress in the following places of the script..
a) Remove the hash and mention the m/c ip address/subnet mask.
# INT_NET=192.168.10.0/24

b) Specify the ip address in the place of
this is for allowing incoming and outgoing packets.

## Accept connections from
$IPTABLES -A INPUT -i eth0 -p icmp -s -j ACCEPT
$IPTABLES -A OUTPUT -i eth0 -p icmp -d -j ACCEPT
$IPTABLES -A INPUT -i eth0 -p tcp -s --dport 22 --syn -m state --state NEW -j ACCEPT
$IPTABLES -A INPUT -i eth0 -p tcp 5666 -s -j ACCEPT
$IPTABLES -A OUTPUT -i eth0 -p udp 5666 -s -j ACCEPT

c) Make the script executable.

Then try,
I hope this will work...

Regds
Palani