Manpage of IPTABLES
pkttype
This module matches the link-layer packet type.
--pkt-type [unicast|broadcast|multicast]
tos
This module matches the 8 bits of Type of Service field in the IP header (ie. including the precedence
bits).
--tos tos
The argument is either a standard name, (use
iptables -m tos -h
to see the list), or a numeric value to match.
ah
This module matches the SPIs in AH header of IPSec packets.
--ahspi [!] spi[:spi]
esp
This module matches the SPIs in ESP header of IPSec packets.
--espspi [!] spi[:spi]
length
http://www.iptablesrocks.org/syntax/man_iptables.htm (11 of 20) [2/13/2004 8:04:51 PM]