:OUTPUT,POSTROUTING | |
*mangle | |
-m owner --uid-owner root;-m owner --uid-owner 0;OK | |
-m owner --uid-owner 0-10;=;OK | |
-m owner --gid-owner root;-m owner --gid-owner 0;OK | |
-m owner --gid-owner 0-10;=;OK | |
-m owner --uid-owner root --gid-owner root;-m owner --uid-owner 0 --gid-owner 0;OK | |
-m owner --uid-owner 0-10 --gid-owner 0-10;=;OK | |
-m owner ! --uid-owner root;-m owner ! --uid-owner 0;OK | |
-m owner --socket-exists;=;OK | |
:INPUT | |
-m owner --uid-owner root;;FAIL |