Contents
ix
3.5 Rule Headers
81
3.5.1
Rule Actions
81
3.5.2
Protocols 83
3.5.3
Address 84
3.5.4
Port Number
86
3.5.5
Direction 88
3.6 Rule Options
88
3.6.1
The ack Keyword
89
3.6.2
The classtype Keyword
89
3.6.3
The content Keyword
93
3.6.4
The offset Keyword
94
3.6.5
The depth Keyword
95
3.6.6
The content list Keyword
95
3.6.7
The dsize Keyword
95
3.6.8
The flags Keyword
96
3.6.9
The fragbits Keyword
97
3.6.10
The icmp_id Keyword
98
3.6.11
The icmp_seq Keyword
98
3.6.12
The itype Keyword
98
3.6.13
The icode Keyword
99
3.6.14
The id Keyword
100
3.6.15
The ipopts Keyword
100
3.6.16
The ip_proto Keyword
101
3.6.17
The logto Keyword
102
3.6.18
The msg Keyword
103
3.6.19
The nocase Keyword
103
3.6.20
The priority Keyword
103
3.6.21
The react Keyword
104
3.6.22
The reference Keyword
104
3.6.23
The resp Keyword
105
3.6.24
The rev Keyword
107
3.6.25
The rpc Keyword
107
3.6.26
The sameip Keyword
108
3.6.27
The seq Keyword
108
3.6.28
The flow Keyword
108
3.6.29
The session Keyword
109
3.6.30
The sid Keyword
110
3.6.31
The tag Keyword
110
3.6.32
The tos Keyword
111
3.6.33
The ttl Keyword
111