
D-6 iptables man Pages
LX Series Configuration Guide
the command syntax.
PARAMETERS
The following parameters make up a rule specification (as
used in the add, delete, insert, replace and append com
mands).
-p, --protocol [!] protocol
The protocol of the rule or of the packet to check.
The specified protocol can be one of tcp, udp,
icmp, or all, or it can be a numeric value, repre
senting one of these protocols or a different one.
A protocol name from /etc/protocols is also
allowed. A "!" argument before the protocol
inverts the test. The number zero is equivalent to
all. Protocol all will match with all protocols
and is taken as default when this option is omit
ted.
-s, --source [!] address[/mask]
Source specification. Address can be either a
hostname, a network name, or a plain IP address.
The mask can be either a network mask or a plain
number, specifying the number of 1's at the left
side of the network mask. Thus, a mask of 24 is
equivalent to 255.255.255.0. A "!" argument before
the address specification inverts the sense of the
address. The flag --src is a convenient alias for
this option.
-d, --destination [!] address[/mask]
Destination specification. See the description of
the -s (source) flag for a detailed description of
the syntax. The flag --dst is an alias for this
option.
-j, --jump target
This specifies the target of the rule; i.e., what
to do if the packet matches it. The target can be
Comentarios a estos manuales