iptables i własne CHAIN - nie bangla :(

[Przemysław Backiel]

Witam,

ma Ci ja takie skrypt

iptables -N imq_inetout
iptables -N imq_inetin


echo 1
iptables -I FORWARD -o ppp+ -j imq_inetout
iptables -I FORWARD -o eth1 -j imq_inetout
iptables -I FORWARD -i eth1 -j imq_inetin
iptables -I FORWARD -i ppp+ -j imq_inetin

echo 2
iptables -t mangle -A imq_inetout -o ppp+ -j IMQ --todev 0
iptables -t mangle -A imq_inetin -i ppp+ -j IMQ --todev 1
echo 3
iptables -t mangle -A imq_inetin -s 192.168.0.0/23 -j IPMARK  --addr=src 
--and-mask=0xffff --or-mask=0x10000
iptables -t mangle -A imq_inetout -d 192.168.0.0/23 -j IPMARK 
--addr=dst --and-mask=0xffff --or-mask=0x10000

echo 4
iptables -t mangle -A POSTROUTING -o eth1 -j IPMARK --addr=dst 
--and-mask=0xffff --or-mask=0x10000
echo 5


i efekt taki, że na "własnych łańcuchach" nie działa

1
2
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
3
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
4
5



na PREROUTING/POST
działa

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
imq_inetin  all  --  anywhere             anywhere
imq_inetin  all  --  anywhere             anywhere
imq_inetout  all  --  anywhere             anywhere
imq_inetout  all  --  anywhere             anywhere


Chain imq_inetin (2 references)
target     prot opt source               destination

Chain imq_inetout (2 references)
target     prot opt source               destination

jaki babol popełniłem?


-- 
Z powazaniem
Przemyslaw Backiel