On 07.06.2011 07:24, Olaf wrote: > Hi all, > > > with 1.4.11 I can no longer invert --syn nor it's equivalent --tcp-flags > SYN,RST,ACK,FIN SYN. > Both show up 'normal' (tcp flags:0x17/0x02) instead of 'inverted' (tcp > flags:!0x17/0x02) when listing rules. > Works fine when using 1.4.10 or older versions. It works for me when using "-p tcp -m tcp ! --syn", but not when using "-p tcp ! --syn", so I guess something is broken in command parsing for implicitly loaded matches. CCed Jan, who can probably help. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html