diff options
| author | Jonas Berlin <xkr47@outerspace.dyndns.org> | 2005-04-01 06:54:23 +0000 |
|---|---|---|
| committer | Harald Welte <laforge@gnumonks.org> | 2005-04-01 06:54:23 +0000 |
| commit | f33c46140f0e0a230aba5d739ce40cb14e066b13 (patch) | |
| tree | e0d8b16f1fe5c33ce1bc2a0e2ab9a68f2e54f96c /extensions/libipt_ipv4options.man | |
| parent | 4a06cf0bd2f5e18eb0149945724b0b4299eec5ea (diff) | |
add lots of man pages (Jonas Berlin)
Diffstat (limited to 'extensions/libipt_ipv4options.man')
| -rw-r--r-- | extensions/libipt_ipv4options.man | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/extensions/libipt_ipv4options.man b/extensions/libipt_ipv4options.man new file mode 100644 index 00000000..122dc68d --- /dev/null +++ b/extensions/libipt_ipv4options.man @@ -0,0 +1,32 @@ +Match on IPv4 header options like source routing, record route, +timestamp and router-alert. +.TP +.B "--ssrr" +To match packets with the flag strict source routing. +.TP +.B "--lsrr" +To match packets with the flag loose source routing. +.TP +.B "--no-srr" +To match packets with no flag for source routing. +.TP +.B "\fR[\fB!\fR]\fB --rr" +To match packets with the RR flag. +.TP +.B "\fR[\fB!\fR]\fB --ts" +To match packets with the TS flag. +.TP +.B "\fR[\fB!\fR]\fB --ra" +To match packets with the router-alert option. +.TP +.B "\fR[\fB!\fR]\fB --any-opt" +To match a packet with at least one IP option, or no IP option +at all if ! is chosen. +.TP +Examples: +.TP +$ iptables -A input -m ipv4options --rr -j DROP +will drop packets with the record-route flag. +.TP +$ iptables -A input -m ipv4options --ts -j DROP +will drop packets with the timestamp flag. |