Re: [LARTC] iptables acknoledgment match

2006-06-22 Thread Erik Slagter 
On wo, 2006-06-21 at 21:28 -0300, Sebastián A. Aresca wrote:
> Hi:
> Anybody have the iptables line to match ack?
> 
> iptables -t mangle -A QoS_Test -p tcp --tcp-flags SYN,RST,ACK ACK -m 
> length --length :128
> 
> I try this but it's not working for me.

Don't you actually mean something like

iptables -m state --state ESTABLISHED ...

That works a bit more intelligently then simply watch for acks...


smime.p7s
Description: S/MIME cryptographic signature
___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[LARTC] iptables acknoledgment match

2006-06-21 Thread Sebastián A . Aresca 

Hi:
   Anybody have the iptables line to match ack?

iptables -t mangle -A QoS_Test -p tcp --tcp-flags SYN,RST,ACK ACK -m 
length --length :128


I try this but it's not working for me.

Best regards.

Sebastián A. Aresca 




___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc