On Sat, 22 Aug 2020 08:22:01 +0200 Balazs Scheidler <bazsi77@xxxxxxxxx> wrote: > @@ -209,15 +209,20 @@ or non-zero bound listening socket (possibly with a non-local address). > Value of the IP_TRANSPARENT socket option in the found socket. It can be 0 or 1.| > boolean (1 bit) > |mark| Value of the socket mark (SOL_SOCKET, SO_MARK). | mark > +|wildcard| > +Indicates weather the socket is wildcard-bound (e.g. 0.0.0.0 or ::0). | s/weather/whether/. > +boolean (1 bit) > |================== > > .Using socket expression > ------------------------ > -# Mark packets that correspond to a transparent socket > +# Mark packets that correspond to a transparent socket. "socket wildcard 0" > +# means that zero bound listener sockets are NOT matched (which is usually "zero-bound" would be a bit clearer (and consistent with the rest). -- Stefano