OpenWRT 下iptables length支持

Created: July 10, 2019, 12:39 a.m. Updated: July 10, 2019, 12:39 a.m.

使用iptables根据包大小来对应不同的规则, OpenWRT下的iptables默认没有打包 -m length的支持。

需要选上 iptables-mod-ipopt

Name: iptables-mod-ipopt
Version: 1.6.2-1
Description: iptables extensions for matching/changing IP packet options.\\ \\ Matches: \\ - dscp\\ - ecn\\ - length\\ - statistic\\ - tcpmss\\ - unclean\\ - hl\\ \\ Targets: \\ - DSCP\\ - CLASSIFY\\ - ECN\\ - HL\\ \\ \\
Installed size: 13kB
Dependencies: libc, iptables, kmod-ipt-ipopt
Categories: network---firewall
Repositories: base
OpenWrt release: OpenWrt-18.06.0
File size: 14kB
License: GPL-2.0
Maintainer: OpenWrt team