
ip6tables man Pages D-27
-P, --policy chain target
Set the policy for the chain to the given target. See the section
TARGETS for the legal targets. Only built-in (non-user-defined)
chains can have policies, and neither built-in nor user-
defined chains can be policy targets.
-E, --rename-chain old-chain new-chain
Rename the user specified chain to the user supplied name. This is
cosmetic, and has no effect on the structure of the table.
-h Help. Give a (currently very brief) description of
the command syntax.
PARAMETERS
The following parameters make up a rule specification (as used in
the add, delete, insert, replace and append commands).
-p, --protocol [!] protocol
The protocol of the rule or of the packet to check. The specified
protocol can be one of tcp, udp, ipv6-icmp|icmpv6, or all, or it
can be a numeric value, representing one of these protocols or a
different one. A protocol name from /etc/protocols is also
allowed. A "!" argument before the protocol inverts the
test. The number zero is equivalent to all. Protocol all will
match with all protocols and is taken as default when this
option is omitted.
-s, --source [!] address[/mask]
Source specification. Address can be either a hostname (please
note that specifying any name to be resolved with a remote query
such as DNS is a really bad idea), a network IPv6 address (with/
mask), or a plain IPv6 address. (the network name isn’t sup-
ported now). The mask can be either a network mask or a plain
number, specifying the number of 1’s at the left side of the
network mask. Thus, a mask of 64 is equivalent to
ffff:ffff:ffff:ffff:0000:0000:0000:0000. A "!" argument before
the address specification inverts the sense of the address. The
flag --src is an alias for this option.
Kommentare zu diesen Handbüchern