update "established", add "fragments"
This commit is contained in:
parent
5a3b9184c8
commit
e04b708a1f
1 changed files with 24 additions and 14 deletions
|
|
@ -2,7 +2,7 @@
|
||||||
.de Id
|
.de Id
|
||||||
.ds Dt \\$4 \\$5
|
.ds Dt \\$4 \\$5
|
||||||
..
|
..
|
||||||
.Id $Id: startup-config.5,v 1.2 2004/11/27 05:19:54 bodea Exp $
|
.Id $Id: startup-config.5,v 1.3 2004/11/29 06:29:28 bodea Exp $
|
||||||
.TH STARTUP-CONFIG 5 "\*(Dt" L2TPNS "File Formats and Conventions"
|
.TH STARTUP-CONFIG 5 "\*(Dt" L2TPNS "File Formats and Conventions"
|
||||||
.SH NAME
|
.SH NAME
|
||||||
startup\-config \- configuration file for l2tpns
|
startup\-config \- configuration file for l2tpns
|
||||||
|
|
@ -275,11 +275,8 @@ and
|
||||||
.I dest
|
.I dest
|
||||||
are as described above for standard lists.
|
are as described above for standard lists.
|
||||||
.PP
|
.PP
|
||||||
For
|
For TCP and UDP matches, source and destination may be optionally
|
||||||
.B tcp
|
followed by a
|
||||||
and
|
|
||||||
.B udp
|
|
||||||
matches, source and destination may be optionally followed by a
|
|
||||||
.I ports
|
.I ports
|
||||||
specification:
|
specification:
|
||||||
.IP
|
.IP
|
||||||
|
|
@ -290,20 +287,33 @@ specification:
|
||||||
range
|
range
|
||||||
.I from to
|
.I from to
|
||||||
.PP
|
.PP
|
||||||
.B tcp
|
|
||||||
matches may also specify
|
|
||||||
.I flags
|
.I flags
|
||||||
to match against tcp header flags:
|
may be one of:
|
||||||
.IP
|
.RS
|
||||||
|
.HP
|
||||||
.RB { match\-any | match\-all }
|
.RB { match\-any | match\-all }
|
||||||
.RB { + | - }{ fin | syn | rst | psh | ack | urg }
|
.RB { + | - }{ fin | syn | rst | psh | ack | urg }
|
||||||
\&...
|
\&...
|
||||||
.br
|
.br
|
||||||
|
Match packets with any or all of the tcp flags set
|
||||||
|
.RB ( + )
|
||||||
|
or clear
|
||||||
|
.RB ( - ).
|
||||||
|
.HP
|
||||||
.B established
|
.B established
|
||||||
.PP
|
.br
|
||||||
.RB ' established '
|
Match "established" TCP connections: packets with
|
||||||
is shorthand for
|
.B RST
|
||||||
.RB ' "match-any +ack +rst -syn" '.
|
or
|
||||||
|
.B ACK
|
||||||
|
set, and
|
||||||
|
.B SYN
|
||||||
|
clear.
|
||||||
|
.HP
|
||||||
|
.B fragments
|
||||||
|
.br
|
||||||
|
Match IP fragments. May not be specified on rules with layer 4
|
||||||
|
matches.
|
||||||
.RE
|
.RE
|
||||||
.SH SEE ALSO
|
.SH SEE ALSO
|
||||||
.BR l2tpns (8)
|
.BR l2tpns (8)
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue