diff options
author | Jonas Berlin <xkr47@outerspace.dyndns.org> | 2005-04-01 06:54:23 +0000 |
---|---|---|
committer | Harald Welte <laforge@gnumonks.org> | 2005-04-01 06:54:23 +0000 |
commit | f33c46140f0e0a230aba5d739ce40cb14e066b13 (patch) | |
tree | e0d8b16f1fe5c33ce1bc2a0e2ab9a68f2e54f96c /extensions/libipt_sctp.man | |
parent | 4a06cf0bd2f5e18eb0149945724b0b4299eec5ea (diff) |
add lots of man pages (Jonas Berlin)
Diffstat (limited to 'extensions/libipt_sctp.man')
-rw-r--r-- | extensions/libipt_sctp.man | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/extensions/libipt_sctp.man b/extensions/libipt_sctp.man new file mode 100644 index 00000000..97b467da --- /dev/null +++ b/extensions/libipt_sctp.man @@ -0,0 +1,28 @@ +.TP +\fB--source-port\fR,\fB--sport \fR[\fB!\fR] \fIport\fR[\fB:\fIport\fR] +.TP +\fB--destination-port\fR,\fB--dport \fR[\fB!\fR] \fIport\fR[\fB:\fIport\fR] +.TP +\fB--chunk-types\fR [\fB!\fR] \fBall\fR|\fBany\fR|\fBonly \fIchunktype\fR[\fB:\fIflags\fR] [...] +The flag letter in upper case indicates that the flag is to match if set, +in the lower case indicates to match if unset. + +Chunk types: DATA INIT INIT_ACK SACK HEARTBEAT HEARTBEAT_ACK ABORT SHUTDOWN SHUTDOWN_ACK ERROR COOKIE_ECHO COOKIE_ACK ECN_ECNE ECN_CWR SHUTDOWN_COMPLETE ASCONF ASCONF_ACK + +chunk type available flags +.br +DATA U B E u b e +.br +ABORT T t +.br +SHUTDOWN_COMPLETE T t + +(lowercase means flag should be "off", uppercase means "on") +.P +Examples: + +iptables -A INPUT -p sctp --dport 80 -j DROP + +iptables -A INPUT -p sctp --chunk-types any DATA,INIT -j DROP + +iptables -A INPUT -p sctp --chunk-types any DATA:Be -j ACCEPT |