Blame extensions/libxt_sctp.man
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
[\fB!\fP] \fB\-\-source\-port\fP,\fB\-\-sport\fP \fIport\fP[\fB:\fP\fIport\fP]
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
[\fB!\fP] \fB\-\-destination\-port\fP,\fB\-\-dport\fP \fIport\fP[\fB:\fP\fIport\fP]
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
[\fB!\fP] \fB\-\-chunk\-types\fP {\fBall\fP|\fBany\fP|\fBonly\fP} \fIchunktype\fP[\fB:\fP\fIflags\fP] [...]
|
|
Packit |
7b22a4 |
The flag letter in upper case indicates that the flag is to match if set,
|
|
Packit |
7b22a4 |
in the lower case indicates to match if unset.
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
Chunk types: DATA INIT INIT_ACK SACK HEARTBEAT HEARTBEAT_ACK ABORT SHUTDOWN SHUTDOWN_ACK ERROR COOKIE_ECHO COOKIE_ACK ECN_ECNE ECN_CWR SHUTDOWN_COMPLETE ASCONF ASCONF_ACK FORWARD_TSN
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
chunk type available flags
|
|
Packit |
7b22a4 |
.br
|
|
Packit |
7b22a4 |
DATA I U B E i u b e
|
|
Packit |
7b22a4 |
.br
|
|
Packit |
7b22a4 |
ABORT T t
|
|
Packit |
7b22a4 |
.br
|
|
Packit |
7b22a4 |
SHUTDOWN_COMPLETE T t
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
(lowercase means flag should be "off", uppercase means "on")
|
|
Packit |
7b22a4 |
.P
|
|
Packit |
7b22a4 |
Examples:
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
iptables \-A INPUT \-p sctp \-\-dport 80 \-j DROP
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
iptables \-A INPUT \-p sctp \-\-chunk\-types any DATA,INIT \-j DROP
|
|
Packit |
7b22a4 |
|
|
Packit |
7b22a4 |
iptables \-A INPUT \-p sctp \-\-chunk\-types any DATA:Be \-j ACCEPT
|