Re: How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?
Sunny73Cr <[email protected]> Wed, 16 Apr 2025 19:56:52 +0000
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <weuaFW4cJd3LV86Dm_XEPqzgsdQlndvgmC3sLnNg4KEH6kM_9IuaVzS3EItenqX_y5N0Ke8Q-eVuv8_oQUYikrH1u9XUyF3ZUploTxzY7OI=@protonmail.com> |
> --socket-exists > I just want to check is there a local socket associated with the packet or not. Apologies; I have misunderstood what this flag does. You could try: `iptables -A FORWARD mark -j MARK --set-mark $FWD_TAG` `iptables -A OUTPUT -m connmark --mark ! $FWD_TAG -j LOG --log-prefix OWN_SK` Regards, sunny