A-2
Syntax of Client Rights
Allowable primitives are shown in
Table A-1
.
Table A-1
Allowable Primitives
Primitive
Explanation
dst
host
host
True if the destination field of the packet is
host
, which can be
either an address or a name.
src
host
host
True if the source field of the packet is host.
host
host
True if either the source or destination of the packet is
host
.
ether dst
ehost
True if the Ethernet destination address is
ehost
.
Ehost
can be
either a name from /etc/ethers or a number (see
ethers
(3N) for
numeric format).
ether src
ehost
True if the Ethernet source address is
ehost
.
ether host
ehost
True if either the ethernet source or destination address is
ehost
.
dst net
net
True if the destination address of the packet has a network
number of
net
.
Net
can be either a name from /etc/networks or a
network number (see
networks
(4) for details).
src net
net
True if the source address of the packet has a network number of
net
.
net
net
True if either the source or destination address of the packet has
a network number of
net
.
net
net
mask
mask
True if the IP address matches
net
with the specific netmask. Can
be qualified with
src
or
dst
.
net
net/len
True if the address matches net a netmask
len
bits wide. Can be
qualified with
src
or
dst
.
dst port
port
True if the packet is ip/tcp or ip/udp, and has a destination port
value of
port
. The
port
can be a number or a name used in
/etc/services (see
tcp
(4P) and
udp
(4P)). If a name is used, both
the port number and protocol are checked. If a number or
ambiguous name is used, only the port number is checked (e.g.,
dst port 513
will print both tcp/login graphic and udp/who traffic,
and
port domain
will print both tcp/domain and udp/domain
traffic).
src port
port
True if the packet has a source port value of
port
.
port
port
True if either the source or destination port of the packet is
port
.
Any of the above port expressions can be prepended with the
keywords,
tcp
or
udp
, as in, for example,
t
cp src port
port
which matches only tcp packets whose source port is
port
.
less
length
True if the packet has a length less than or equal to
length
. This
is equivalent to
len
<=
length
.
greater
length
True if the packet has a length greater than or equal to
length
.
This is equivalent to
len
>=
length
.
Содержание ELITECONNECT SMC2504W
Страница 2: ......
Страница 4: ......
Страница 14: ...xiv...
Страница 18: ...x Preface...
Страница 44: ...2 18 Configuring the WLAN Security System...
Страница 64: ...4 12 Controlling the System Functions...
Страница 74: ...5 10 Viewing System Status...
Страница 136: ...6 62 Configuring the Rights Manager Figure 6 72 Filter Redirect Editor Step 6 Click Update...
Страница 140: ...6 66 Configuring the Rights Manager Figure 6 77 Rights for Guest Step 7 When you have finished click Done...
Страница 150: ...6 76 Configuring the Rights Manager...
Страница 168: ...B 14 Command Line Interface...
Страница 182: ...C 14 Rights Tutorial Figure C 8 Rights for Guest Table C 4 explains the Rights Debugger...
Страница 189: ...EliteConnect WLAN Security System User Manual C 21 Figure C 12 Rights Debugger for Fred...
Страница 240: ...X 4 Index...
Страница 242: ...ii...