how to match bits with values different from valid ones ?

[Daniel Sercaianu]

Our internet provider gives us two types of services: international internet and local exchange internet. This tow types of services differs by setting a certain value of tos of packet who's coming from international internet different from valid values who -m tos accept. I want to count(match and not set) with iptables packets with tos let's say, is 0x88. I applied the ftos patch but this patch can only set(not match) packets with any tos value between 0x00 and 0xff. The tos target instead can also match with -m tos but it is limited to only valid values. Is there a way I can do this thing? a -m ftos module like -m tos etc...    I use the kernel 2.4.17 with iptables 1.2.5 and I preffer not to changed it, because it has support for htb. Can I apply to this kernel(2.4.17) patch from iptables 1.2.6a who as I understand has another way of dealing with tos bits from packets(DSCP)?   Daniel Sercaianu