Displaying 1 result from an estimated 1 matches for "k0a1a".
Did you mean:
0x1a
2011 Aug 14
2
[Bug 737] New: string matching can not be negated
...lter/iptables
Version: linux-2.6.x
Platform: i386
OS/Version: Debian GNU/Linux
Status: NEW
Severity: trivial
Priority: P3
Component: unknown
AssignedTo: netfilter-buglog at lists.netfilter.org
ReportedBy: danja at k0a1a.net
Estimated Hours: 0.0
hi there,
a simple rule:
iptables -t mangle -A PREROUTING -i eth2 -p tcp --dport 80 -m string --to 70 !
--string 'GET /' --algo bm -j LOG
produces no results, whether the same but not negated rule does:
iptables -t mangle -A PREROUTING -i eth2 -p tcp --dpor...