Messages in this thread | | | Date | Tue, 2 Sep 2003 22:18:07 +0200 | From | Harald Welte <> | Subject | Re: [BUGS?: 2.6.0test4] iptables and tc problems |
| |
On Mon, Sep 01, 2003 at 02:28:18PM +0200, Nico Schottelius wrote:
> Then trying to match the ftp connections > bruehe:~# iptables -A OUTPUT -m owner --uid-owner 0 -j ACCEPT > iptables: Invalid argument > bruehe:~# iptables -t mangle -A POSTROUTING -o ppp0 -m owner --uid-owner 1001 -j MARK --set-mark 55 > iptables: Invalid argument > > Why does iptables or the kernel not accept that?
you will most likely have to recompile your iptables userspace program. The owner match has recently undergone some changes in the structure used for communication between kernel and userspace.
btw: you can easily match ftp data sessions (if you use ip_conntrack_ftp) by matching with "-m helper --helper ftp"
please direct netfilter/iptables related questions to netfilter@lists.netfilter.org in the future.
> Greetings, > Nico
-- - Harald Welte <laforge@gnumonks.org> http://www.gnumonks.org/ ============================================================================ Programming is like sex: One mistake and you have to support it your lifetime [unhandled content-type:application/pgp-signature] | |