Netfilter/iptables xt_u32 module

[maxpain]

Hello. I need to filter some packets by headers.

iptables -A FORWARD -p tcp --sport 443 -m u32 --u32 "0x4=0x10000" -m comment --comment "Roskompozor RST" -j DROP
iptables: No chain/target/match by that name.

But seems UDMP kernel doesn't have xt_u32 kernel module. How I can install it?

[fabianishere]

You'll need to build this module yourself using the kernel sources for the UDM/P. You can either build it for the stock kernel and insert it directly, or build a custom kernel with this module included and launch it with this project.

[maxpain]

You'll need to build this module yourself using the kernel sources for the UDM/P. You can either build it for the stock kernel and insert it directly, or build a custom kernel with this module included and launch it with this project.

Could you please make some example how to do that?

[fabianishere]

Sorry, I won't have time to provide more details than this. There are resources available online on how to do this.