On Wed, Dec 18, 2013 at 11:27:22AM +0800, Fan Du wrote: > This patch enables user to set iptables ACTIONs for IPcomp > flow specified by its SPI value. > > For example: > iptables -A OUTPUT -p 108 -m ipcomp --ipcompspi 0x12 -j DROP > ip6tables -A OUTPUT -p 108 -m ipcomp --ipcompspi 0x12 -j DROP > > IPcomp packet with spi as 0x12 will be dropped. Applied with minor glitches, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html