MRV Communications LX-4000 Series Información técnica descargar pdf (Pagina 561)

100

101

D-30 ip6tables man Pages

LX Series Configuration Guide

tcp

These extensions are loaded if “--protocol tcp” is specified. It

provides the following options:

--source-port [!] port[:port]

Source port or port range specification. This can either be a

service name or a port number. An inclusive range can also be

specified, using the format port:port. If the first port is

omitted, "0" is assumed; if the last is omitted, "65535" is

assumed. If the second port greater then the first they will be

swapped. The flag --sport is a convenient alias for this

option.

--destination-port [!] port[:port]

Destination port or port range specification. The flag --dport is

a convenient alias for this option.

--tcp-flags [!] mask comp

Match when the TCP flags are as specified. The first argument is

the flags which we should examine, written as a comma-separated

list, and the second argument is a comma-separated list of flags

which must be set. Flags are: SYN ACK FIN RST URG PSH ALL NONE.

Hence the command

ip6tables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST SYN will

only match packets with the SYN flag set, and the ACK, FIN and RST

flags unset.

[!] --syn

Only match TCP packets with the SYN bit set and the ACK and RST

bits cleared. Such packets are used to request TCP connection

initiation; for example, blocking such packets coming in an

interface will prevent incoming TCP connections, but outgoing

TCP connections will be unaffected. It is equivalent to --tcp-

flags SYN,RST,ACK SYN. If the "!" flag precedes the "--syn",

the sense of the option is inverted.

--tcp-option [!] number

Match if TCP option set.

1 2 ... 556 557 558 559 560 561 562 563 564 565 566 ... 691 692

Comentarios a estos manuales

Sin comentarios

MRV Communications LX-4000 Series Información técnica Pagina 561

Comentarios a estos manuales

Relacionado con productos y manuales para Servidores MRV Communications LX-4000 Series