connbytes

connbytes

[Andy Furniss]

Does anyone know if connbytes + CONNMARK will work now CONNMARK and 
conntrack-acc are in kernel (using 2.6.11).

I got pom to patch (by removing dependencies) and everything compiles OK 
as modules.

I haven't tried them together yet as I can't get iptables to parse the 
options for connbytes.

iptables -t mangle -A PREROUTING -m connbytes --connbytes 0:80000 
--connbytes-dir both --connbytes-mode bytes

iptables v1.3.1: Unknown arg `bytes'

I noticed that byte would be "let through" by iptables - but failed in 
the parse bit of libipt_connbytes.c

iptables v1.3.1: Unknown --connbytes-mode `byte'

I tried changing libipt_connbytes.c to parse byte rather than bytes but 
then iptables.c accepted bytes but not byte.

I tried with and without pre loading the module.

TIA

Andy.