Re: missing module for tcp-flags match?

[Mike Wright <xktnniuymlla@xxxxxxxxxxxxxx>]

Jan Engelhardt wrote:
> > > When tyring to set up the rule:
> >
> > iptables -A INPUT -p tcp -m tcp \
> > --tcp-flags FIN,SYN,RST,PSH,ACK,URG SYN,ACK -j DROP
>
> And if you drop "-m tcp" now, since that should be implied by "-p tcp"?

Yes, according to the man page.