On Tue, Dec 31, 2002 at 12:28:56AM +0100, Michael Zieger wrote: > Hi, > > I just found in the man page the "ECN" target, which should allow to > drop ECN flags. I tried this simple rule: > > iptables -A OUTPUT -o eth0 -p tcp -j ECN --ecn-tcp-remove > > But the error is: "iptables: Invalid argument" > > What is wrong there? Or is it a bug in the ECN target? I use the latest > iptables v1.2.7a. You cannot use the ECN target from the filter table. You have to use it from the 'mangle' table. Packet filtering is done in 'filter', packet modification in 'mangle'. > BTW, there is also a typo bug in libipt_ECN.c line 112, it should be: > "ECN target: Parameter --ecn-tcp-remove is required"); > but you wrote "--ecn-remove"... Thanks, I will correct this before the iptables-1.2.8 release. > regards, zmi -- Live long and prosper - Harald Welte / laforge@gnumonks.org http://www.gnumonks.org/ ============================================================================ GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M- V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)
Attachment:
pgp00267.pgp
Description: PGP signature
