Digi TransPort WR11 User Manual page 770

Configuring security
pass-ifup
Allows outbound packets that match the rule to pass through the firewall but only if the link is already
active.
debug
Causes the router to tag any packets matching the rule for debug. This means that for every matching
rule that is encountered from this point in the script onwards, an entry will be placed in the pseudo-file
FWLOG.TXT.
dscp
Causes any packets matching this rule to have its DSCP value adjusted according to this rule. The
DSCP value of a packet indicates the type of service required. The router uses it in conjunction with
QOS (Quality of Service) functions. A decimal or hexadecimal number must follow the dscp keyword to
indicate the value that should be set.
For IPv6 packets, the traffic class portion of the IPv6 header will be modified with the DSCP value.
vdscp
Similar to the dscp action, in that it adjusts the DSCP value in a packet. The difference is that this is a
virtual change only, which means that the actual packet is not changed, and that the packet is
processed as if it had the DSCP value as indicated. Like the dscp action, a decimal or hexadecimal
number must follow.
Digi TransPort® Routers User Guide
Firewall
770