Re: How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> --socket-exists
> I just want to check is there a local socket associated with the packet or not.

Apologies; I have misunderstood what this flag does.
You could try:
`iptables -A FORWARD mark -j MARK --set-mark $FWD_TAG`
`iptables -A OUTPUT -m connmark --mark ! $FWD_TAG -j LOG --log-prefix OWN_SK`

Regards,
sunny





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux