Jan Engelhardt <jengelh@xxxxxxx> wrote: > On Thursday 2015-02-19 14:11, Florian Westphal wrote: > > >The inversion flag wasn't set in the match struct. > > The documentation needs to be updated too. > > It reflected what source code did: not supportting the "!" option at > all/silently ignoring it. Interesting, --help does mention it: dst match options: [!] --dst-len length total length of this header So, whats the desired action? Given that the kernel already supports it (on kernel side its a module alias for hop-by-hop match) I'd vote for just also updating the man page snippet to mention ! as well, since it seems like artifical restriction. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
