RE: [LARTC] Some advanced filtering questions

["Leigh Sharpe" <lsharpe@pacificwireless.com.au>]

Or, for that matter, how to negate a u32 match.

ie, match anything NOT from 1.2.3.0/24

 

 

Regards,
             Leigh

 

Leigh Sharpe
Network Systems Engineer
Pacific Wireless
Ph +61 3 9584 8966
Mob 0408 009 502

Helpdesk 1300 300 616
email lsharpe@pacificwireless.com.au
web www.pacificwireless.com.au

 

---

From: Leigh Sharpe
Sent: Wednesday, April 04, 2007 11:55 AM
To: lartc
Subject: [LARTC] Some advanced filtering questions

Hi All,

I need to do some tricky filtering stuff. Can anyone tell me if any of the following are possible?

 

* match on a combination of firewall mark AND u32 criteria. ie.  handle 6 fw AND u32 match ip src 1.2.3.4/32 - to match packets from 1.2.3.4 which have been marked elsewhere

OR

* to OR the values of u32 matches. Something like u32 match  ip src 1.2.3.4/32 OR match ip dst 1.2.3.4/32 - to match packets going to or from 1.2.3.4

OR

* to use a mask on firewall marks as per iptables/ebtables MARK matches.

 

Regards,
             Leigh

 

Leigh Sharpe
Network Systems Engineer
Pacific Wireless
Ph +61 3 9584 8966
Mob 0408 009 502

Helpdesk 1300 300 616
email lsharpe@pacificwireless.com.au
web www.pacificwireless.com.au

 

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc