Blame man/man8/tc-xt.8

Packit d3f73b
.TH "iptables action in tc" 8 "3 Mar 2016" "iproute2" "Linux"
Packit d3f73b
Packit d3f73b
.SH NAME
Packit d3f73b
xt - tc iptables action
Packit d3f73b
.SH SYNOPSIS
Packit d3f73b
.in +8
Packit d3f73b
.ti -8
Packit d3f73b
.BR tc " ... " "action xt \-j"
Packit d3f73b
.IR TARGET " [ " TARGET_OPTS " ]"
Packit d3f73b
.SH DESCRIPTION
Packit d3f73b
The
Packit d3f73b
.B xt
Packit d3f73b
action allows to call arbitrary iptables targets for packets matching the filter
Packit d3f73b
this action is attached to.
Packit d3f73b
.SH OPTIONS
Packit d3f73b
.TP
Packit d3f73b
.BI -j " TARGET \fR[\fI TARGET_OPTS \fR]"
Packit d3f73b
Perform a jump to the given iptables target, optionally passing any target
Packit d3f73b
specific options in
Packit d3f73b
.IR TARGET_OPTS .
Packit d3f73b
.SH EXAMPLES
Packit d3f73b
The following will attach a
Packit d3f73b
.B u32
Packit d3f73b
filter to the
Packit d3f73b
.B ingress
Packit d3f73b
qdisc matching ICMP replies and using the
Packit d3f73b
.B xt
Packit d3f73b
action to make the kernel yell 'PONG' each time:
Packit d3f73b
Packit d3f73b
.RS
Packit d3f73b
.EX
Packit d3f73b
tc qdisc add dev eth0 ingress
Packit d3f73b
tc filter add dev eth0 parent ffff: proto ip u32 \\
Packit d3f73b
	match ip protocol 1 0xff \\
Packit d3f73b
	match ip icmp_type 0 0xff \\
Packit d3f73b
	action xt -j LOG --log-prefix PONG
Packit d3f73b
.EE
Packit d3f73b
.RE
Packit d3f73b
.SH SEE ALSO
Packit d3f73b
.BR tc (8),
Packit d3f73b
.BR tc-u32 (8),
Packit d3f73b
.BR iptables-extensions (8)