On Mon, Dec 04, 2006 at 02:02:38PM +0100, Axel Rau wrote: > If "flags S/SA" would just be ignored by none-tcp packets, I would be > happy.
Be happy, it is. ;) > But the man page says: > "This rule only applies to TCP packets that have the flags <a> set > out of set <b>." > This means to me: all none-tcp packets are ignored by this rule. This probably should read instead This rule only applies to TCP packets which have the flags <a> set out o set <b>." Daniel