creepy iptables problem.. please help

[Gordon Messmer]

Andy Green wrote:
> Somebody in the thread at some point said:
>>>
>>> iptables -A FORWARD -d 192.168.199.253  -j ACCEPT  << doesnt work
>>> iptables -A FORWARD -s 192.168.199.253  -j ACCEPT << doesnt work
> 
> Don't you need a -p tcp between the FORWARD and the -d / -s?  For other
> iptables commands anyway it insists to have the protocol named before it
> can interpret the addresses you are giving.

No, you can use addresses without a protocol, since addresses are part 
of the IP spec.  You can't use port numbers without specifying a 
protocol, since port numbers are protocol-specific.