Phil Sutter <phil@xxxxxx> wrote: Sorry for being late. > +@cp -f extensions/libxt_connlabel.conf.test extensions/libxt_connlabel.conf.tmp > -m connlabel --label "bit40";=;OK > -m connlabel ! --label "bit40";=;OK > -m connlabel --label "bit41" --set;=;OK > -m connlabel ! --label "bit41" --set;=;OK > -m connlabel --label "bit128";;FAIL Maybe we should forget about the label names and just tests -m connlabel --label 127 i.e., parse the numeric value instead of providing a fake one. I agree that temporary replace of hosts one is bad.