Key Pages: [ Rope Home Page | Basics (tutorial) | Language Reference | Download ]
The "yes" action terminates the script (or expect_one, or eval block), indicating that the match has passed (ie: match found).
For example:
lift(4) "HTTP" eq yes
This lifts four bytes from the packet at $offset and compares them with the string "HTTP". If they are the same, then the script terminates, returning a "match found" status to Iptables.
no, expect_one, eval
Lowth.com: [ Home | Rope | P2PWall | LinWiz | cutter | Protector - Free Antivirus software | TapeIO ]