Displaying 1 result from an estimated 1 matches for "ahspi".
Did you mean:
acpi
2014 Feb 13
5
[Bug 904] New: Matching ah without optional argument gives unintuitive result
...ts.netfilter.org
ReportedBy: saltyacid at gmail.com
Estimated Hours: 0.0
Found on version 1.4.19.1 and concerns both iptables and ip6tables.
How to use -m ah is described here:
http://www.netfilter.org/documentation/HOWTO/netfilter-extensions-HOWTO-6.html
# ip6tables -A INPUT -m ah --ahspi 500 -j DROP
# ip6tables --list
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP all anywhere anywhere ah spi:500
However, ignoring the optional argument --ahspi gives a check that we match
SPI=0 (I would think that th...