MRV Communications LX-4000 Series Technical Information PDF herunterladen (Seite 546)

100

101

iptables man Pages D-15

error packet returned:

--reject-with type

The type given can be icmp-net-unreachable, icmp-

host-unreachable, icmp-port-unreachable, icmp-

proto-unreachable, icmp-net-prohibitedor icmp-host-

prohibited, which return the appropriate ICMP error

message (port-unreachable is the default). The

option echo-reply is also allowed; it can only be

used for rules which specify an ICMP ping packet,

and generates a ping reply. Finally, the option

tcp-reset can be used on rules which only match the

TCP protocol: this causes a TCP RST packet to be

sent back. This is mainly useful for blocking

ident probes which frequently occur when sending

mail to broken mail hosts (which won't accept your

mail otherwise).

TOS

This is used to set the 8-bit Type of Service field in the

IP header. It is only valid in the mangle table.

--set-tos tos

You can use a numeric TOS values, or use

iptables -j TOS -h

to see the list of valid TOS names.

MIRROR

This is an experimental demonstration target which inverts

the source and destination fields in the IP header and

retransmits the packet. It is only valid in the INPUT,

FORWARD and PREROUTING chains, and user-defined chains

which are only called from those chains. Note that the

outgoing packets are NOT seen by any packet filtering

chains, connection tracking or NAT, to avoid loops and

Kommentare zu diesen Handbüchern

Keine Kommentare

MRV Communications LX-4000 Series Technical Information Seite 546

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Server MRV Communications LX-4000 Series