| 12345678910111213141516171819 |
- This module attempts to match various characteristics of the packet creator,
- for locally generated packets. This match is only valid in the OUTPUT and
- POSTROUTING chains. Forwarded packets do not have any socket associated with
- them. Packets from kernel threads do have a socket, but usually no owner.
- .TP
- [\fB!\fP] \fB\-\-uid\-owner\fP \fIusername\fP
- .TP
- [\fB!\fP] \fB\-\-uid\-owner\fP \fIuserid\fP[\fB\-\fP\fIuserid\fP]
- Matches if the packet socket's file structure (if it has one) is owned by the
- given user. You may also specify a numerical UID, or an UID range.
- .TP
- [\fB!\fP] \fB\-\-gid\-owner\fP \fIgroupname\fP
- .TP
- [\fB!\fP] \fB\-\-gid\-owner\fP \fIgroupid\fP[\fB\-\fP\fIgroupid\fP]
- Matches if the packet socket's file structure is owned by the given group.
- You may also specify a numerical GID, or a GID range.
- .TP
- [\fB!\fP] \fB\-\-socket\-exists\fP
- Matches if the packet is associated with a socket.
|
