We have iptables v1.4.21 running and i am trying to stop all fragmented packet but following rules doesn't working what is wrong here? iptables -t raw -A PREROUTING -m u32 ! --u32 "0x4&0x3fff=0x0" -m comment --comment "Fragmented" -j DROP To test rules i am doing following: ping -M want -s 3000 192.168.1.1 -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
