Black Box LS1016A, Руководство пользователя

Страница: 161 / 450

Chapter 3 - Additional Features
User Guide 161
Match Extensions
-i - -in-interface[!][name]
Optional name of an interface via which a packet is received (for packets
entering the INPUT and FORWARD chains). When the "!" argument is used
before the interface name, the sense is inverted. If the interface name ends in
a "+" then any interface which begins with this name will match. If this
option is omitted, the string "+" is assumed, which will match with any inter-
face name.
-o - -out-interface[!][name]
Optional name of an interface via which a packet is going to be sent (for
packets entering the FORWARD and OUTPUT chains). When the "!" argu-
ment is used before the interface name, the sense is inverted. If the interface
name ends in a "+" then any interface which begins with this name will
match. If this option is omitted, the string "+" is assumed, which will match
with any interface name.
[!] -f - -fragment
This means that the rule only refers to second and further fragments of frag-
mented packets. Since there is no way to tell the source or destination ports
of such a packet (or ICMP type), such a packet will not match any rules
which specify them. When the "!" argument precedes the "-f" flag, the rule
will only match head fragments, or unfragmented packets.
-c - -set-counters PKTS BYTES
This enables the administrater to initialize the packet and byte counters of a
rule (during INSERT, APPEND, REPLACE operations).
-v - -verbose
Verbose output. This option makes the list command show the interface
address, the rule options (if any), and the TOS masks. The packet and byte
counters are also listed, with the suffix 'K', 'M' or 'G' for 1000, 1,000,000 and
1,000,000,000 multipliers respectively (but see the -x flag to change this).
For appending, insertion, deletion and replacement, this causes detailed
information on the rule or rules to be printed.
-n
- -numeric
Numeric output. IP addresses and port numbers will be printed in numeric
format. By default, the program will try to display them as host names, net-
work names, or services (whenever applicable).