Deny Tcp - Dell Force10 MXL Blade Reference Manual

Table 6-2. ICMP Message Type Keywords
Keyword
mask-reply
mask-request
mobile-redirect
net-redirect
net-tos-redirect
net-tos-unreachable
net-unreachable
network-unknown
no-room-for-option
option-missing
packet-too-big
parameter-problem
port-unreachable
precedence-unreachable
protocol-unreachable
reassembly-timeout
redirect
router-advertisement
router-solicitation
source-quench
source-route-failed
time-exceeded
timestamp-reply
timestamp-request
traceroute
ttl-exceeded
unreachable

deny tcp

Configure a filter that drops TCP packets meeting the filter criteria.
Syntax deny tcp { source mask | any | host ip-address } [ bit ] [ operator port [ port ]] { destination mask | any |
host ip-address } [ dscp ] [ bit ] [ operator port [ port ]] [ count [ byte ]] [ order ] [ fragments ]
To remove this filter, you have two choices:
•
•
Use the no seq sequence-number command if you know the filter's sequence number.
Use the no deny tcp { source mask | any | host ip-address } { destination mask | any | host
ip-address } command.
ICMP Message Type Name
Mask replies
Mask requests
Mobile host redirect
Network redirect
Network redirect for TOS
Network unreachable for TOS
Network unreachable
Network unknown
Parameter required but no room
Parameter required but not present
Fragmentation needed and DF set
All parameter problems
Port unreachable
Precedence cutoff
Protocol unreachable
Reassembly timeout
All redirects
Router discovery advertisements
Router discovery solicitations
Source quenches
Source route failed
All time exceeded
Timestamp replies
Timestamp requests
Traceroute
TTL exceeded
All unreachables
Access Control Lists (ACL) | 105