On Thursday 2015-02-19 14:11, Florian Westphal wrote: >The inversion flag wasn't set in the match struct. The documentation needs to be updated too. It reflected what source code did: not supportting the "!" option at all/silently ignoring it. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html