From mboxrd@z Thu Jan  1 00:00:00 1970
From: Andy Furniss <andy.furniss@dsl.pipex.com>
Date: Thu, 04 Nov 2004 15:42:00 +0000
Subject: Re: [LARTC] Inverting filters
Message-Id: <418A4DC8.3040607@dsl.pipex.com>
List-Id: <lartc.vger.kernel.org>
References: <200411031246.12523.nikolay@domonet.ru>
In-Reply-To: <200411031246.12523.nikolay@domonet.ru>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: lartc@vger.kernel.org

Nikolay Dmitriev wrote:
> How to invert match parameter?
> 
> Like this:
> 
> tc filter add dev eth0 protocol ip parent 1: prio 1 u32 \
>     match ip src 10.20.30.40 \
>     match ip dst !10.30.0/24 \
>     match ip dst !10.40.0/24 \
>     flowid 1:20

I'm not sure - but ISTR failing to invert u32 some time ago. Generally 
iptables would like a space round the ! - but I don't think it helps u32.

Maybe you could do it with bit masks.

Andy.


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/