MRV Communications LX-4000 Series Technical Information PDF herunterladen (Seite 540)

100

101

iptables man Pages D-9

command to load any necessary modules (targets,

match extensions, etc).

MATCH EXTENSIONS

iptables can use extended packet matching modules. These

are loaded in two ways: implicitly, when -p or --protocol

is specified, or with the -m or --match options, followed

by the matching module name; after these, various extra

command line options become available, depending on the

specific module. You can specify multiple extended match

modules in one line, and you can use the -h or --help

options after the module has been specified to receive

help specific to that module.

The following are included in the base package, and most

of these can be preceded by a ! to invert the sense of

the match.

tcp

These extensions are loaded if `--protocol tcp' is speci

fied. It provides the following options:

--source-port [!] [port[:port]]

Source port or port range specification. This can

either be a service name or a port number. An

inclusive range can also be specified, using the

format port:port. If the first port is omitted,

"0" is assumed; if the last is omitted, "65535" is

assumed. If the second port greater then the first

they will be swapped. The flag --sport is an alias

for this option.

--destination-port [!] [port[:port]]

Destination port or port range specification. The

flag --dport is an alias for this option.

--tcp-flags [!] mask comp

Match when the TCP flags are as specified. The

first argument is the flags which we should exam

1 2 ... 535 536 537 538 539 540 541 542 543 544 545 ... 691 692

Kommentare zu diesen Handbüchern

Keine Kommentare

MRV Communications LX-4000 Series Technical Information Seite 540

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Server MRV Communications LX-4000 Series