Blame extensions/libxt_addrtype.man
|
Packit |
7b22a4 |
This module matches packets based on their
|
|
Packit |
7b22a4 |
.B address type.
|
|
Packit |
7b22a4 |
Address types are used within the kernel networking stack and categorize
|
|
Packit |
7b22a4 |
addresses into various groups. The exact definition of that group depends on the specific layer three protocol.
|
|
Packit |
7b22a4 |
.PP
|
|
Packit |
7b22a4 |
The following address types are possible:
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "UNSPEC"
|
|
Packit |
7b22a4 |
an unspecified address (i.e. 0.0.0.0)
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "UNICAST"
|
|
Packit |
7b22a4 |
an unicast address
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "LOCAL"
|
|
Packit |
7b22a4 |
a local address
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "BROADCAST"
|
|
Packit |
7b22a4 |
a broadcast address
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "ANYCAST"
|
|
Packit |
7b22a4 |
an anycast packet
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "MULTICAST"
|
|
Packit |
7b22a4 |
a multicast address
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "BLACKHOLE"
|
|
Packit |
7b22a4 |
a blackhole address
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "UNREACHABLE"
|
|
Packit |
7b22a4 |
an unreachable address
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "PROHIBIT"
|
|
Packit |
7b22a4 |
a prohibited address
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "THROW"
|
|
Packit |
7b22a4 |
FIXME
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "NAT"
|
|
Packit |
7b22a4 |
FIXME
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "XRESOLVE"
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
[\fB!\fP] \fB\-\-src\-type\fP \fItype\fP
|
|
Packit |
7b22a4 |
Matches if the source address is of given type
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
[\fB!\fP] \fB\-\-dst\-type\fP \fItype\fP
|
|
Packit |
7b22a4 |
Matches if the destination address is of given type
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
.BI "\-\-limit\-iface\-in"
|
|
Packit |
7b22a4 |
The address type checking can be limited to the interface the packet is coming
|
|
Packit |
7b22a4 |
in. This option is only valid in the
|
|
Packit |
7b22a4 |
.BR PREROUTING ,
|
|
Packit |
7b22a4 |
.B INPUT
|
|
Packit |
7b22a4 |
and
|
|
Packit |
7b22a4 |
.B FORWARD
|
|
Packit |
7b22a4 |
chains. It cannot be specified with the
|
|
Packit |
7b22a4 |
\fB\-\-limit\-iface\-out\fP
|
|
Packit |
7b22a4 |
option.
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
\fB\-\-limit\-iface\-out\fP
|
|
Packit |
7b22a4 |
The address type checking can be limited to the interface the packet is going
|
|
Packit |
7b22a4 |
out. This option is only valid in the
|
|
Packit |
7b22a4 |
.BR POSTROUTING ,
|
|
Packit |
7b22a4 |
.B OUTPUT
|
|
Packit |
7b22a4 |
and
|
|
Packit |
7b22a4 |
.B FORWARD
|
|
Packit |
7b22a4 |
chains. It cannot be specified with the
|
|
Packit |
7b22a4 |
\fB\-\-limit\-iface\-in\fP
|
|
Packit |
7b22a4 |
option.
|