On Wed, 09 Apr 2014 11:07:36 +0100, Fabien Bourdaire said: > # Log rules > iptables -t filter -A INPUT -p tcp --dport 443 -m u32 --u32 \ > "52=0x18030000:0x1803FFFF" -j LOG --log-prefix "BLOCKED: HEARTBEAT"
That 52= isn't going to work if it's an IPv4 packet with an unexpected number IP or TCP options, or an IPv6 connection....
pgpSHCF2kY9zz.pgp
Description: PGP signature
