iptables question

[madmatrix]

Hi there,
I want to use below command in my firewall. Actually -t nat should be my own function.
iptables -t nat -A POSTROUTING -j ACCEPT -o $INT_IF -d $INT_NET

I want to specify two subnets following -d. And these two subnets must be excluded. I know "-d ! 192.168.2.0/24" works. But now I want two subnets excluded. When I tried "-d ! 192.168.2.0/24 && ! 192.168.1.0/24", it can't work.

Please help guys. I have been searched for a long time, still can't figure it out.

Thank you very much!

Lou

[anomie]

Try using two rules - one for each subnet.

[madmatrix]

Thanks!!!
I tried. But because of my own function(not -t nat), I must use only one rule.

Any other help?
Thanks!

Lou