Firewall Handbuch für LINUX 2.0 und 2.2 - zurück

eject_statement = "reject" [ "with" ( "icmp_net_unreachable"
| "icmp_host_unreachable"
| "icmp_protocol_unreachable"
| "icmp_port_unreachable"
| "tcp_reset"
| "best"
| "echo_reply" ) ]
rule ";".
rule = [ "options" ip_option { "," ip_option } ]
( "all"
| protocol_number
| "icmp" [ icmp_type { "," icmp_type } ]
| "igmp" [ igmp_type { "," igmp_type } ]
| "tcp"
| "udp"
| "rip" [ ( address { "," address } | inside | outside ) ] )
[ "from" ( fulladdr { "," fulladdr }
| "inside" [ "port" port [ ".." port ] ]
| "outside" [ "port" port [ ".." port ] ] ) ]
[ "to" ( fulladdr { "," fulladdr }
| "inside" [ "port" port [ ".." port ] ]
| "outside" [ "port" port [ ".." port ] ] ) ]
"notification_level" value.
ip_option = ( "record_route"
| "timestamp"
| "security"
| "loose_source_route"
| "strict_source_route"
| "sat_id"
| "time_to_live" ( "" | "!=" ) value ).
icmp_type = ( "icmp_echo_reply"
| "icmp_destination_unreachable"
| "icmp_source_quench"
| "icmp_redirect"
| "icmp_echo_request"
| "icmp_time_exceeded"
| "icmp_parameter_problem"
| "icmp_timestamp"
| "icmp_timestamp_reply"
| "icmp_info_request"
| "icmp_info_reply"
| "icmp_address"
| "icmp_address_reply" ).
igmp_type = ( "igmp_host_membership_query"
| "igmp_host_membership_report"
| "igmp_host_leave_message" ).
fulladdr = ( address [ "port" port [ ".." port ] ]
| "port" port [ ".." port ] ).
address = ( ip_address | """ name """ ) [ "mask" mask ].
port = ( port_no | name ).
notification_section = "notification"
"level" ( value | "spoof" ) ":" ( { entry ";" } | ";" )
{ "level" ( value | "spoof" ) ":" ( { entry ";" } | ";" ) }.
Erstellt von Doc Gonzo - http://kickme.to/plugins