THOMSON 516 Reference Manual page 168

Firewall Commands
src
dstintf
dstintfgrp
dst
precedence
dscp
tos
prot
syn
urg
ack
srcport
srcportend
dstport
166
The source IP address (range) the packet should [or should NOT] come from.
(Supports cidr notation).
The name of the interface the packet should [or should NOT] be going to.
Note
NOT applicable if used in a chain assigned to the
The interface group the packet should [or should NOT] be going to. Choose
between:
wan
local
lan.
Note
NOT applicable if used in a chain assigned to the
The destination IP address (range) the packet should [or should NOT] be going to
(supports cidr notation).
A number between 0 and 7.
Represents the precedence in the IP packet (part of tos).
A number between 0 and 63.
Represents the DSCP in the IP packet (part of tos).
A number between 0 and 255.
Represents the Type Of Service (ToS) specification which should be expected [or
NOT expected] in the IP packet. The ToS numbering specification is in
accordance to the latest version of
The protocol (name or number) expected [or NOT expected] in the IP packet.
Choose between:
icmp
igmp
ipinip
tcp
udp
ah
esp
ipcomp
or, alternatively, specify the protocol number.
Expect Transmission Control Protocol (TCP) SYN flag set (yes) or not (no).
In combination with TCP ACK, this allows selection of incoming versus outgoing
TCP connections.
Expect TCP URG flag set (yes) or not (no).
Expect TCP ACK flag set (yes) or not (no).
The TCP/User Datagram Protocol (UDP) port (or beginning of range) the packet
should [or should NOT] be from.
Select one of the supported TCP/UDP port names (See
Port Names" on page 375) or, alternatively, specify the port number.
The source TCP/UDP port range end (inclusive)(Only applicable for ranges).
Select one of the supported TCP/UDP port names (See
Port Names" on page 375) or, alternatively, specify the port number.
The TCP/UDP port (or beginning of range) the packet should [or should NOT] be
going to.
Select one of the supported TCP/UDP port names (See
Port Names" on page 375) or, alternatively, specify the port number.
output
output
RFC1700: Assigned numbers
" Supported TCP/UDP
" Supported TCP/UDP
" Supported TCP/UDP
OPTIONAL
OPTIONAL
hook.
OPTIONAL
hook.
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
.
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
OPTIONAL
E-DOC-CTC-20040907-0010 v1.0