Hello. I would like to ask whether iptables -A CHAIN -p tcp -m ecn --ecn-tcp-cwr --ecn-tcp-ece -m ecn --ecn-ip-ect 1 -m ecn --ecn-ip-ect 2 -j ACTION will work as 1) filter by tcp options 2) filter by tcp options and ecn-ip-ect 2 3) filter by only ecn-ip-ect 2 4) filter by tcp options AND (ecn-ip-ect 1 OR ecn-ip-ect 2) 5) some other behavior the 4-th variant is desirable (the goal is to be able to specify all desirable options in one rule, or I have to split filtering by ect1 and ect2 on two different rules?). Unfortunately, it is unclear from the manual. Thanks in advance, Sergey Naumov. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
