Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > On Thu, May 17, 2012 at 01:03:09PM +0200, Florian Westphal wrote: > > also, -p mobility gets us EINVAL from kernel, use -p ipv6-mh instead. > > /etc/services in debian uses mobility-header instead mobility. Should still work, iptables has ipv6-mh hardwired as fallback, see xtables_parse_protocol() in libxtables/xtables.c . Do you still want me to resend it with -p 135? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html