Table of Contents
Advertisement
256
transmit [not]
TX-INTERFACE
Specifies a sending interface as the profile for the packets to be matched.
This can be specified for output and forwarding chains.
For TX-INTERFACE, specify the name of a sending interface.
not
If
is specified, interface names other than the one specified for
TX-INTERFACE
become the profiles of packets to be matched.
[ipv4]
Specifies IPv4 as the profile for the packets to be matched.
[ipv6]
Specifies IPv6 as the profile for the packets to be matched.
protocol [not]
PROTOCOL
Specifies a protocol as the profile for the packets to be matched.
For PROTOCOL, specify the name or number of internet protocol that
supports any of the following: ah, esp, icmp, igmp, ip, ipip, ipv6, ipv6-frag,
ipv6-icmp, ipv6-opts, ipv6-route, ospf, tcp, udp, and DARPA
not
If
is specified, protocols other than the one specified for
become the profiles of packets to be matched.
tcp
To specify
for PROTOCOL, use the following syntax.
tcp [not] mask {all|TCP-MASK} flags {none|TCP-FLAG}
For
TCP-MASK
and TCP-FLAG, you can specify up to five of the following:
ack
fin
psh
rst
syn
,
,
,
,
To specify all six of them, specify
not
If
is specified, TCP flags other than the one specified for
profiles of packets to be matched.
sctp
To specify
for PROTOCOL, use the following syntax.
sctp [not] {all|any|only} [CHUNK-TYPE[:FLAGS]
[CHUNK-TYPE[:FLAGS]...]]
For
, specify the name of SCTP data or omit this parameter.
CHUNK-TYPE
For
, you can omit this parameter, but if you specified data for
FLAGS
, specify
CHUNK-TYPE
not
If
is specified, data names other than the one specified for
the profiles of packets to be matched.
icmp
ipv6-icmp
To specify
or
{icmp|ipv6-icmp} [not]
For TYPE, specify the type number of ICMP or ICMPv6 by using a numeric
value from 0 to 255.
For CODE, specify the code number of ICMP or ICMPv6 by using a numeric
value from 0 to 255, or you can omit this parameter.
urg
, or
.
all
.
U
B
E
,
, or
. If data is specified for
for PROTOCOL, use the following syntax.
{TYPE
[CODE]|ICMPTYPES}
PROTOCOL
mask
become the
, specify
CHUNK-TYPE
mask
become
T
.
Advertisement
Table of Contents
Troubleshooting
