From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andy Furniss Subject: Re: how to block udp frag? Date: Mon, 10 Jan 2005 11:30:38 +0000 Message-ID: <41E2675E.6020804@dsl.pipex.com> References: <2E314DE03538984BA5634F12115B3A4E01BC4203@email1.mitretek.org> <41E001FB.80807@dsl.pipex.com> <1105205583.7108.0.camel@ierdnac> <41E03A83.6030403@dsl.pipex.com> <41E03FDE.7070806@dsl.pipex.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <41E03FDE.7070806@dsl.pipex.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: Andy Furniss Cc: netfilter@lists.netfilter.org, justin.piszcz@mitretek.org Andy Furniss wrote: > Andy Furniss wrote: > >> ierdnah-ipt wrote: >> >>> http://www.netfilter.org/patch-o-matic/pom-base.html#pom-base-u32 >>> >>> Inspecting individual bits >> >> >> >> I guess this is the title for below - but I just realised it's also >> the answer to my not being able to say "not" - do it one bit at a time >> :-) > > > Doh - ignore that bit - I'm confusing myself - latest thought I could > match the field anyway, don't know why I ever thought I couldn't. Will > test tomorrow. > > Andy. Slightly less confused now - and thinking I was right in the first place. Inelegant as it may be, I could do it with lots of single bit tests. Andy.