Re: How to Achieve Functionality Equivalent to iptables -m owner --socket-exist in nft?

Sunny73Cr <[email protected]> Wed, 16 Apr 2025 19:56:52 +0000
Newsgroups gmane.comp.security.firewalls.netfilter.general
Message-ID <weuaFW4cJd3LV86Dm_XEPqzgsdQlndvgmC3sLnNg4KEH6kM_9IuaVzS3EItenqX_y5N0Ke8Q-eVuv8_oQUYikrH1u9XUyF3ZUploTxzY7OI=@protonmail.com>
> --socket-exists
> I just want to check is there a local socket associated with the packet or not.

Apologies; I have misunderstood what this flag does.
You could try:
`iptables -A FORWARD mark -j MARK --set-mark $FWD_TAG`
`iptables -A OUTPUT -m connmark --mark ! $FWD_TAG -j LOG --log-prefix OWN_SK`

Regards,
sunny