On Monday 06 May 2002 8:23 pm, Kaddouch Guillaume wrote: > I want to block any packets that come to me with ONLY the ACK flag set. > But I don't really know the difference between "--tcp-flags ALL ACK" and > "--tcp-flags ACK ACK". I supposed that is the first one, but i'm not sure. > Is it true?
Correct. --tcp-flags ALL ACK will look at all the flags, and match only if ACK is set (and no others). --tcp-flags ACK ACK will only look at the ACK flag, and match if it is set, without caring what other flags may also be set. Antony.
