Red Hat Enterprise Linux 5 Administration Unleashed

486CHAPTER 24Configuring a Firewallipv4optionsMatch based on IP (version 4) header options.--ssrrMatch packets with the flag strict source routing.--lsrrMatch packets with the flag loose source routing.--no-srrMatch packets with no flag for source routing.[!] --rrMatch packets with the RR flag.[!] --tsMatch packets with the TS flag.[!] --raMatch packets with the router-alert option.[!] --any-optMatch packets with at least one IP option.lengthMatch exact packet length or match packets based on a range of lengths.--length [!] :Define a length or range of lengths to match.limitUse with other parameters and targets to limit the value being matched.--limit Upper rate limit. Rate number can optionally be followed by /, where is second, minute, hour, or day to qualify rate.--limit-burst Maximum burst value, where the burst value is increased by 1 each time thedefined rate limit is reached. Default value is 5.macMatch the source MAC address of the packet. Only valid when using Ethernetdevices and entering the PREROUTING, FORWARD, or INPUT chain.--mac-source [!] must be in the format XX:XX:XX:XX:XX:XX.