
iptables man Pages D-11
--icmp-type [!] typename
This allows specification of the ICMP type, which
can be a numeric ICMP type, or one of the ICMP type
names shown by the command
iptables -p icmp -h
mac
--mac-source [!] address
Match source MAC address. It must be of the form
XX:XX:XX:XX:XX:XX. Note that this only makes sense
for packets entering the PREROUTING, FORWARD or
INPUT chains for packets coming from an ethernet
device.
limit
This module matches at a limited rate using a token bucket
filter: it can be used in combination with the LOG target
to give limited logging. A rule using this extension will
match until this limit is reached (unless the `!' flag is
used).
--limit rate
Maximum average matching rate: specified as a num
ber, with an optional `/second', `/minute',
`/hour', or `/day' suffix; the default is 3/hour.
--limit-burst number
The maximum initial number of packets to match:
this number gets recharged by one every time the
limit specified above is not reached, up to this
number; the default is 5.
multiport
This module matches a set of source or destination ports.
Up to 15 ports can be specified. It can only be used in
conjunction with -p tcp or -p udp.
--source-port [port[,port]]
Match if the source port is one of the given ports.
Komentarze do niniejszej Instrukcji