ConntrackMatch¶

Example:

>>> from linuxnet.iptables import ConntrackMatch
>>> m = ConntrackMatch()
>>> m.ctstate().equals('NEW')
<linuxnet.iptables.matches.conntrackmatch.ConntrackMatch object at 0x7ffab737e208>
>>> m.to_iptables_args()
['-m', 'conntrack', '--ctstate', 'NEW']

class ConntrackMatch[source]¶

Match against the connection tracking attributes.

ctstate() → CtStateCriterion[source]¶: Match against the connection tracking state

ctstatus() → CtStatusCriterion[source]¶: Matching against the connection tracking status

to_iptables_args() → List[str][source]¶: Returns iptables(8) arguments for this match

CtStateCriterion¶

class CtStateCriterion(match)[source]¶

Compare against the connection tracking state

The comparison value is a string.

compare(is_equal: bool, *args, **kwargs) → Match¶: Alternative method used for comparisons. It invokes equals() (or not_equals()) with args and kwargs if is_equal is True (or False).

equals(value) → Match¶: Compare with the specified value

get_value() → Any¶: Returns the criterion value

is_positive() → bool¶

Returns the ‘polarity’ of the criterion; True for equals() or False for not_equals()

Raises IptablesError if the criterion is not set

is_set() → bool¶: Returns True if the criterion has been set

not_equals(*args, **kwargs) → Match¶

Express inequality comparison against the argument values.

The arguments of this method are the same as those of the equals() method.

This method invokes the equals() method and then reverses the polarity.

Returns this Match object.

CtStatusCriterion¶

class CtStatusCriterion(match)[source]¶

Compare against the connection tracking status