Tahoe 684 User Manual page 24

will be passed.
-m <IP address>
By default during the masquerade an outgoing interface's IP
address is used. The option above allows forcing use of another address.
accept / deny / masq - information, what to do with a packet,
that conforms to a given rule (accept / discard / masquerade)
Note: The modem always chooses the first matching rule from
the list. So if the more general rule comes first, and the more
specific is later, then the first one will be applied and the last one -
ignored. Thus the specific rule has to be inserted before the
general one, as in following example:
ipchains add -s 215.16.11.0/24 deny
ipchains insert -s 215.16.11.5 accept
Commands above inhibit the access for the whole 215.16.11.0/24
subnet except the 215.16.11.5 address.
Note: The specific "accept" rule (concerning one IP address) has
to be inserted before the general one (concerning the whole
subnet), either using the "insert" command as in the example
above or by adding the specific rule first and then the general one.
Otherwise the router will always apply the first rule and will never
reach the second one, as the packet coming from 215.16.11.5 fits
both of them and if the general one is first, then it will be applied.
More examples:
ipchains add d 0.0.0.0/0 80-80 p tcp deny
Inhibits access to the port 80 on all external servers.
ipchains add s 192.168.0.0/16 masq
Enables masquerade for the 192.168.0.0/16 subnet (other
addresses are passed unchanged)
4.3.14. keypad
Allows locking of front panel keyboard. Three settings are
possible:
20
4.3.14