On Mon, 2008-02-18 at 15:36 +0200, Покотиленко Костик wrote: > В Пнд, 18/02/2008 в 09:25 -0300, Michael Fernández M пишет: > > Hi, > > > > Is there a way to filter a picket by the size of it?, i mean I Would > > like to filter all the packet hat it size 2 MB. > > > > Is that possible? > > > > Thanks to any answer. > > iptables -m length --length 0:1024 > > But let me admit that normal packet length is up to 1500 bytes, in some > cases up to 65535 bytes. Maybe you didn't correctly face the question? > Yea, i know... but the thing is: I have a mail server (Postfix), and if I restrict the size of messages up to 2 MB.. then a user send an email (3 MB) and Postfix receive the message an then say: "You cannot send this message because of the size"... and send a notification to the user... so I want to stop the packets before them arrives to Postfix... and take off this load to the mail server... Now is better explain? Regars,... Michael.- - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html