From netfilter Tue Feb 12 09:47:23 2013 From: Aaron Lewis Date: Tue, 12 Feb 2013 09:47:23 +0000 To: netfilter Subject: --and-mark while matching? Message-Id: <20130212094723.GB20707 () devnull> X-MARC-Message: https://marc.info/?l=netfilter&m=136066246012238 Hi, Looks like the mark module doesn't support "and" matching mechanism, iptables -I INPUT -m mark --and-mark 0x20 -j REJECT I want to match the packet when the mark has all bit of 0x20 set, possible? -- Best Regards, Aaron Lewis - PGP: 0xDFE6C29E ( http://pgp.mit.edu/ ) Finger Print: 9482 448F C7C3 896C 1DFE 7DD3 2492 A7D0 DFE6 C29E -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html