op-value-.-for-instance-src-tcp-port-10-8-.-the-port-icmp-type-and-tcp-opt-directives-will-only-match-first-fragments.-you-can-omit-a-lot-of-this-syntax.-for-example-instead-of-ip-proto-tcp-you-can-just-say-tcp-
and-similarly-for-port-www-just-say-www-tcp-opt-syn-just-say-syn-net-10.0.0.024-just-say-10.0.0.024-and-ip-unfrag-just-say-unfrag-.-you-can-often-eliminate-repetitive-qualifiers-toosrc-port-80-or-81-is-the-same-as-src-port-80-or-src-port-81-.-a-pattern-consisting-entirely-of-any-or-all-matches-every-packet.-the-patterns-are-scanned-in-order-and-the-packet-is-sent-to-the-output-corresponding-to-the-first-matching-pattern.-thus-more-specific-patterns-should-come-before-less-specific-ones.-you-will-get-a-warning-if-no-packet-will-ever-match-a-pattern.-usually-this-is-because-an-earlier-pattern-is-more-general-or-because-your-pattern-is-contradictory-src-port-www-and-src-port-ftp-.-notes-valid-ip-port-namesecho-discard-daytime-chargen-ftp-data-ftp-ssh-telnet-smtp-domain-dns-bootps-bootpc-tftp-finger-www-pop3-sunrpc-auth-nntp-ntp-netbios-ns-netbios-dgm-netbios-ssn-snmp-snmp-trap-irc-imap3-https-rip-route-imaps-pop3s-valid-ip-protocol-namesicmp-igmp-ipip-tcp-udp-valid-tcp-optionssyn-fin-ack-rst-psh-urg-valid-icmp-type-namesecho-reply-unreachable-sourcequench-redirect-echo-routeradvert-routersolicit-timeexceeded-parameterproblem-timestamp-timestamp-reply-inforeq-inforeq-reply-maskreq-maskreq-reply-this-element-correctly-handles-ip-packets-with-options.-tcp
This topic does not exist yet
You've followed a link to a topic that doesn't exist yet. If permissions allow, you may create it by using the Create this page button.
