> Hello List,
> 
> Is it possible to match packets with the DF flag set/not set?
Hmm, i don't think it is possible with netfilter.

For sure you could match it using u32 filter.
DF flag is a 50th IP header bit set to 1.

Regards,
Maciej Soltysiak



Reply via email to