
The patch allows you to use the owner match in the INPUT chain to match 
properties of the receiving socket. It is mainly intended to help filter weird
protocols like H.323 or IIOB without conntrack helpers, but could also come
handy for local user traffic accounting and similar stuff.

Usage:
	iptables -A INPUT -m udp/tcp -m owner ...

Example:

	# Allow packets on eth0 to sockets owned by local user gnugk
	
	iptables -A INPUT -i eth0 -p udp -m owner --uid-owner gnugk -j ACCEPT
	iptables -A INPUT -i eth0 -p tcp -m owner --uid-owner gnugk -j ACCEPT

