
ip6tables man Pages D-31
udp
These extensions are loaded if “--protocol udp” is specified. It
provides the following options:
--source-port [!] port[:port]
Source port or port range specification. See the description of
the --source-port option of the TCP extension for details.
--destination-port [!] port[:port]
Destination port or port range specification. See the description
of the --destination-port option of the TCP extension for
details.
ipv6-icmp
This extension is loaded if ‘--protocol ipv6-icmp’ or ‘--pro-
tocol icmpv6’ is specified. It provides the following option:
--icmpv6-type [!] typename
This allows specification of the ICMP type, which can be a
numeric IPv6-ICMP type, or one of the IPv6-ICMP type names shown by
the command
ip6tables -p ipv6-icmp -h
mac
--mac-source [!] address
Match source MAC address. It must be of the form
XX:XX:XX:XX:XX:XX. Note that this only makes sense for packets
coming from an Ethernet device and entering the PREROUTING, FOR-
WARD or INPUT chains.
limit
This module matches at a limited rate using a token bucket fil-
ter. A rule using this extension will match until this limit
is reached (unless the “!” flag is used). It can be used in com-
bination with the LOG target to give limited logging, for example.
--limit rate
Maximum average matching rate: specified as a number, with an
optional ‘/second’, ‘/minute’, ‘/hour’, or ‘/day’ suffix; the
Kommentare zu diesen Handbüchern