[LARTC] Inverting filters

[LARTC] Inverting filters

[Nikolay Dmitriev]

How to invert match parameter?

Like this:

tc filter add dev eth0 protocol ip parent 1: prio 1 u32 \
    match ip src 10.20.30.40 \
    match ip dst !10.30.0/24 \
    match ip dst !10.40.0/24 \
    flowid 1:20

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] Inverting filters

[Andy Furniss]

Nikolay Dmitriev wrote:
> How to invert match parameter?
> 
> Like this:
> 
> tc filter add dev eth0 protocol ip parent 1: prio 1 u32 \
>     match ip src 10.20.30.40 \
>     match ip dst !10.30.0/24 \
>     match ip dst !10.40.0/24 \
>     flowid 1:20

I'm not sure - but ISTR failing to invert u32 some time ago. Generally 
iptables would like a space round the ! - but I don't think it helps u32.

Maybe you could do it with bit masks.

Andy.


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/