<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>jimmyhasablog &#187; gentoo</title>
	<atom:link href="http://www.jimmyhasablog.com/tag/gentoo/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.jimmyhasablog.com</link>
	<description>woof woof</description>
	<lastBuildDate>Sun, 15 Aug 2010 21:49:23 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Gentoo: iptables Multiport Module</title>
		<link>http://www.jimmyhasablog.com/2010/02/10/gentoo-iptables-multiport-module/</link>
		<comments>http://www.jimmyhasablog.com/2010/02/10/gentoo-iptables-multiport-module/#comments</comments>
		<pubDate>Wed, 10 Feb 2010 18:47:24 +0000</pubDate>
		<dc:creator>jimmyb</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[gentoo]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.jimmyhasablog.com/?p=36</guid>
		<description><![CDATA[After finally talking myself into re-doing iptables on all of our servers, I came across an issue where the options &#8220;-m multiport --dports 80,443&#8221; wouldn&#8217;t work. It kept spitting back &#8220;iptables: No chain/target/match by that name.&#8221; What you need to check for is the that the multiport module within the kernel has been selected and]]></description>
			<content:encoded><![CDATA[<p>After finally talking myself into re-doing iptables on all of our servers, I came across an issue where the options &#8220;<code>-m multiport --dports 80,443</code>&#8221; wouldn&#8217;t work. It kept spitting back &#8220;iptables: No chain/target/match by that name.&#8221;</p>
<p>What you need to check for is the that the multiport module within the kernel has been selected and compiled in. You can find this option under:</p>
<p>Networking support &#8212;><br />
Networking options  &#8212;><br />
Network packet filtering framework (Netfilter) &#8212;></p>
<p>Make sure &#8220;Advanced netfilter configuration&#8221; is turned on, and then it&#8217;ll be under:</p>
<p>Core Netfilter Configuration  &#8212;><br />
&#8220;multiport&#8221; Multiple port match support</p>
<p>I ended up having to recompile my kernel, but I&#8217;m glad I was able to figure this one out. The people in the #netfilter channel on Freenode were as helpful as usual (and by that I mean they were completely useless). The multiport module is great when you want to open multiple ports without having to use multiple commands, or for organizational purposes want to group multiple ports open. As from my example above you can see I&#8217;ve set port the HTTP and HTTPS port in the same line.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.jimmyhasablog.com/2010/02/10/gentoo-iptables-multiport-module/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
