Key Pages: [ Rope Home Page | Basics (tutorial) | Language Reference | Download ]
The "no" action terminates the script (or expect_one, or eval block), indicating that the match has failed (ie: no match found).
For example:
lift(4) "HTTP" ne no
This lifts four bytes from the packet at $offset and compares them with the string "HTTP". If they are not the same, then the script terminates, returning a "no match" status to Iptables.
By the way .. the expect_str action can be used to achieve exactly the same goal as this example, as in..
expect_str( "HTTP" )
Lowth.com: [ Home | Rope | P2PWall | LinWiz | cutter | Protector - Free Antivirus software | TapeIO ]