
D-32 ip6tables man Pages
LX Series Configuration Guide
default is 3/hour.
--limit-burst number
Maximum initial number of packets to match: this number gets
recharged by one every time the limit specified above is not
reached, up to this number; the default is 5.
multiport
This module matches a set of source or destination ports. Up to
15 ports can be specified. It can only be used in conjunction with
-p tcp or -p udp.
--source-ports port[,port[,port...]]
Match if the source port is one of the given ports. The flag -
-sports is a convenient alias for this option.
--destination-ports port[,port[,port...]]
Match if the destination port is one of the given ports. The
flag --dports is a convenient alias for this option.
--ports port[,port[,port...]]
Match if the both the source and destination ports are equal to
each other and to one of the given ports.
mark
This module matches the netfilter mark field associated with a
packet (which can be set using the MARK target below).
--mark value[/mask]
Matches packets with the given unsigned mark value (if a mask is
specified, this is logically ANDed with the mask before the compar-
ison).
owner
This module attempts to match various characteristics of the
packet creator, for locally-generated packets. It is only valid in
the OUTPUT chain, and even this some packets (such as ICMP ping
responses) may have no owner, and hence never match. This is
regarded as experimental.
Comentarios a estos manuales