Re: does nft 'tcp option ... exists' work?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Maciej Żenczykowski <zenczykowski@xxxxxxxxx> wrote:
> > You could try this:
> >
> > tcp option @34,8,8 == 34
> 
> So this seems to mean @number(34),offset(8),length(8) == 34
> And I understand the idea, but don't understand where the two 8's are
> coming from.

Yes, its wrong, it should be 0,8 as you found out.

> Is this counting bits? bytes?

Bits.

> Furthermore, I realized that really mangle postrouting 'reset tcp
> option fastopen' is a better solution to my particular problem.

Ah, yes, that will nop it out.




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux