MRV Communications LX-4000 Series Información técnica descargar pdf (Pagina 541)

100

101

D-10 iptables man Pages

LX Series Configuration Guide

ine, written as a comma-separated list, and the

second argument is a comma-separated list of flags

which must be set. Flags are: SYN ACK FIN RST URG

PSH ALL NONE. Hence the command

iptables -A FORWARD -p tcp --tcp-flags

SYN,ACK,FIN,RST SYN

will only match packets with the SYN flag set, and

the ACK, FIN and RST flags unset.

[!] --syn

Only match TCP packets with the SYN bit set and the

ACK and FIN bits cleared. Such packets are used to

request TCP connection initiation; for example,

blocking such packets coming in an interface will

prevent incoming TCP connections, but outgoing TCP

connections will be unaffected. It is equivalent

to --tcp-flags SYN,RST,ACK SYN. If the "!" flag

precedes the "--syn", the sense of the option is

inverted.

--tcp-option [!] number

Match if TCP option set.

udp

These extensions are loaded if `--protocol udp' is speci

fied. It provides the following options:

--source-port [!] [port[:port]]

Source port or port range specification. See the

description of the --source-port option of the TCP

extension for details.

--destination-port [!] [port[:port]]

Destination port or port range specification. See

the description of the --destination-port option of

the TCP extension for details.

icmp

This extension is loaded if `--protocol icmp' is speci

fied. It provides the following option:

1 2 ... 536 537 538 539 540 541 542 543 544 545 546 ... 691 692

Comentarios a estos manuales

Sin comentarios

MRV Communications LX-4000 Series Información técnica Pagina 541

Comentarios a estos manuales

Relacionado con productos y manuales para Servidores MRV Communications LX-4000 Series