KOVACS Krisztian wrote: > The TPROXY target implements redirection of non-local TCP/UDP traffic to local > sockets. Additionally, it's possible to manipulate the packet mark if and only > if a socket has been found. (We need this because we cannot use multiple > targets in the same iptables rule.) Same suggestions as for the socket match (EXPERIMENTAL and TCP/UDP check in ->checkentry). - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html