From mboxrd@z Thu Jan  1 00:00:00 1970
From: Henrik Nordstrom <hno@marasystems.com>
Date: Fri, 14 Dec 2001 15:16:52 +0000
Subject: Re: [LARTC] tc: u32 match in nexthdr not working?
Message-Id: <marc-lartc-100834304817234@msgid-missing>
List-Id: <lartc.vger.kernel.org>
References: <marc-lartc-100827285418750@msgid-missing>
In-Reply-To: <marc-lartc-100827285418750@msgid-missing>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
To: lartc@vger.kernel.org

On Friday 14 December 2001 14.15, Julian Anastasov wrote:

> =A0=A0=A0=A0=A0=A0=A0=A0No, ihl includes the options. Everything works pe=
rfectly.
> It is bug to use sport and dport if ip options are present. There
> are tcp dst and tcp src for example. Same for udp. For icmp there
> are icmp type and icmp code. All they use the same base pointer.

Which only works if you have a chained the filter rules using a hash table,=
=20
where the hash table has a IP offset rule.

Regards
Henrik

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/