Richard Horton a écrit : > On 29 July 2010 10:08, Portedaix <portedaix@xxxxxxxxx> wrote: >> >> Is there a way to have a rule equivalent to the one below which is >> for kernel 2.6.14 and above, with a linux kernel 2.6.9 ? >> '#iptables -A INPUT -p udp -m udp --dport 5060 -m string --string >> "Cirpack KeepAlive Packet" --algo bm --to 65535 --source sip.ovh.net -j DROP' [...] > The other option would be, depending on the headers etc, use something > like the u32 match to discard them. The 'u32' match was added in the mainline kernel in version 2.6.23. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
