1This module attempts to match various characteristics of the packet creator, 2for locally generated packets. This match is only valid in the OUTPUT and 3POSTROUTING chains. Forwarded packets do not have any socket associated with 4them. Packets from kernel threads do have a socket, but usually no owner. 5.TP 6[\fB!\fP] \fB\-\-uid\-owner\fP \fIusername\fP 7.TP 8[\fB!\fP] \fB\-\-uid\-owner\fP \fIuserid\fP[\fB\-\fP\fIuserid\fP] 9Matches if the packet socket's file structure (if it has one) is owned by the 10given user. You may also specify a numerical UID, or an UID range. 11.TP 12[\fB!\fP] \fB\-\-gid\-owner\fP \fIgroupname\fP 13.TP 14[\fB!\fP] \fB\-\-gid\-owner\fP \fIgroupid\fP[\fB\-\fP\fIgroupid\fP] 15Matches if the packet socket's file structure is owned by the given group. 16You may also specify a numerical GID, or a GID range. 17.TP 18\fB\-\-suppl\-groups\fP 19Causes group(s) specified with \fB\-\-gid-owner\fP to be also checked in the 20supplementary groups of a process. 21.TP 22[\fB!\fP] \fB\-\-socket\-exists\fP 23Matches if the packet is associated with a socket. 24