Cyclades AlterPath ACS, Справочник по командам

Страница: 140 / 420

124
Network
Rule Specification
The following parameters make up a rule specification (as used in the add, delete, insert,
replace and append commands):
-P - - policy Set the policy for the chain to the given target. Only non-user-defined
chains can have policies, and neither built-in nor user-defined chains can
be policy targets.
-E - - rename-chain Rename the user-specified chain to the user-supplied name. This is
cosmetic, and has no effect on the structure of the table.
-h - - help Help. Gives a (currently very brief) description of the command syntax.
Parameter Description
-p - -protocol[!]protocol
The protocol of the rule or of the packet to check. The specified protocol can
be one of tcp, udp, icmp, or all, or it can be a numeric value, representing one
of these protocols or a different one. A protocol name from
/etc/protocols is
also allowed. A "!" argument before the protocol inverts the test. The number
zero is equivalent to all. Protocol all will match with all protocols and is taken
as default when this option is omitted.
-s - -source[!]address[/mask]
Source specification. Address can be either a hostname, a network name, or a
plain IP address. The mask can be either a network mask or a plain number,
specifying the number of 1's at the left side of the network mask. Thus, a mask
of 24 is equivalent to 255.255.255.0. A "!" argument before the address
specification inverts the sense of the address. The flag - -src is a convenient
alias for this option.
-d - -destination[!]address[/mask]
Destination specification. See the description of the -s (source) flag for a
detailed description of the syntax. The flag - -dst is an alias for this option.
Table 4.4: iptables rules specifications
Command Description
Table 4.3: iptables commands options