<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="MSHTML 6.00.2800.1491" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN
class=516040802-04042007>Or, for that matter, how to negate a u32
match.</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN
class=516040802-04042007>ie, match anything NOT from
1.2.3.0/24</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN
class=516040802-04042007></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV align=left>
<DIV align=left><FONT face=Arial
size=2>Regards,<BR>
Leigh</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Leigh Sharpe<BR>Network Systems Engineer<BR>Pacific
Wireless<BR>Ph +61 3 9584 8966<BR>Mob 0408 009 502</FONT></DIV>
<DIV><FONT face=Arial size=2>Helpdesk 1300 300 616<BR>email <A
title=mailto:lsharpe@pacificwireless.com.au
href="blocked::mailto:lsharpe@pacificwireless.com.au">lsharpe@pacificwireless.com.au</A><BR>web
<A title=http://www.pacificwireless.com.au/
href="blocked::http://www.pacificwireless.com.au/">www.pacificwireless.com.au</A></FONT></DIV></DIV>
<DIV> </DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> Leigh Sharpe <BR><B>Sent:</B> Wednesday,
April 04, 2007 11:55 AM<BR><B>To:</B> lartc<BR><B>Subject:</B> [LARTC] Some
advanced filtering questions<BR></FONT><BR></DIV>
<DIV></DIV>
<P>
<DIV><SPAN class=293544801-04042007><FONT face=Arial size=2>Hi All,
</FONT></SPAN></DIV>
<DIV><SPAN class=293544801-04042007><FONT face=Arial size=2>I need to do some
tricky filtering stuff. Can anyone tell me if any of the following are
possible?</FONT></SPAN></DIV>
<DIV><SPAN class=293544801-04042007><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=293544801-04042007><FONT face=Arial size=2>* match on a
combination of firewall mark AND u32 criteria. ie. handle 6 fw AND u32
match ip src 1.2.3.4/32 - to match packets from 1.2.3.4 which have been
marked elsewhere</FONT></SPAN></DIV>
<DIV><SPAN class=293544801-04042007><FONT face=Arial
size=2>OR</FONT></SPAN></DIV>
<DIV><SPAN class=293544801-04042007><FONT face=Arial size=2>* to OR the values
of u32 matches. Something like u32 match </FONT> <FONT face=Arial
size=2>ip src 1.2.3.4/32 OR match ip dst 1.2.3.4/32 - to match packets going
to or from 1.2.3.4</FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=293544801-04042007>OR</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=293544801-04042007>* to use a mask on
firewall marks as per iptables/ebtables MARK matches.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV align=left>
<DIV align=left><FONT face=Arial
size=2>Regards,<BR>
Leigh</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Leigh Sharpe<BR>Network Systems Engineer<BR>Pacific
Wireless<BR>Ph +61 3 9584 8966<BR>Mob 0408 009 502</FONT></DIV>
<DIV><FONT face=Arial size=2>Helpdesk 1300 300 616<BR>email <A
title=mailto:lsharpe@pacificwireless.com.au
href="blocked::mailto:lsharpe@pacificwireless.com.au">lsharpe@pacificwireless.com.au</A><BR>web
<A title=http://www.pacificwireless.com.au/
href="blocked::http://www.pacificwireless.com.au/">www.pacificwireless.com.au</A></FONT></DIV></DIV>
<DIV> </DIV>
<P></P></BODY></HTML>