* --and-mark while matching?
@ 2013-02-12 9:47 Aaron Lewis
2013-02-12 12:25 ` Ambroz Bizjak
0 siblings, 1 reply; 2+ messages in thread
From: Aaron Lewis @ 2013-02-12 9:47 UTC (permalink / raw)
To: netfilter mailing list
Hi,
Looks like the mark module doesn't support "and" matching mechanism,
iptables -I INPUT -m mark --and-mark 0x20 -j REJECT
I want to match the packet when the mark has all bit of 0x20 set,
possible?
--
Best Regards,
Aaron Lewis - PGP: 0xDFE6C29E ( http://pgp.mit.edu/ )
Finger Print: 9482 448F C7C3 896C 1DFE 7DD3 2492 A7D0 DFE6 C29E
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: --and-mark while matching?
2013-02-12 9:47 --and-mark while matching? Aaron Lewis
@ 2013-02-12 12:25 ` Ambroz Bizjak
0 siblings, 0 replies; 2+ messages in thread
From: Ambroz Bizjak @ 2013-02-12 12:25 UTC (permalink / raw)
To: Aaron Lewis; +Cc: netfilter mailing list
iptables -I INPUT -m mark --mark 0x20/0x20 -j REJECT
See the description of the mark match. If you specify "-m mark --mark
A/B", the mark is first and'ed with B and then the result is checked
for equality to A.
On Tue, Feb 12, 2013 at 10:47 AM, Aaron Lewis
<the.warl0ck.1989@gmail.com> wrote:
> Hi,
>
> Looks like the mark module doesn't support "and" matching mechanism,
>
> iptables -I INPUT -m mark --and-mark 0x20 -j REJECT
>
> I want to match the packet when the mark has all bit of 0x20 set,
> possible?
>
> --
> Best Regards,
> Aaron Lewis - PGP: 0xDFE6C29E ( http://pgp.mit.edu/ )
> Finger Print: 9482 448F C7C3 896C 1DFE 7DD3 2492 A7D0 DFE6 C29E
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2013-02-12 12:25 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-02-12 9:47 --and-mark while matching? Aaron Lewis
2013-02-12 12:25 ` Ambroz Bizjak
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.