diff options
Diffstat (limited to 'extensions/libip6t_ipv6header.man')
| -rw-r--r-- | extensions/libip6t_ipv6header.man | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/extensions/libip6t_ipv6header.man b/extensions/libip6t_ipv6header.man new file mode 100644 index 0000000..fe3fe98 --- /dev/null +++ b/extensions/libip6t_ipv6header.man @@ -0,0 +1,29 @@ +This module matches IPv6 extension headers and/or upper layer header. +.TP +.BR "--header " "[!] \fIheader\fP[,\fIheader\fP...]" +Matches the packet which EXACTLY includes all specified headers. The headers +encapsulated with ESP header are out of scope. +.IR header +can be +.IR hop | hop-by-hop +(Hop-by-Hop Options header), +.IR dst +(Destination Options header), +.IR route +(Routing header), +.IR frag +(Fragment header), +.IR auth +(Authentication header), +.IR esp +(Encapsulating Security Payload header), +.IR none +(No Next header) which matches 59 in the 'Next Header field' of IPv6 header or any IPv6 extension headers, or +.IR proto +which matches any upper layer protocol header. A protocol name from /etc/protocols and numeric value also allowed. The number 255 is equivalent to +.IR proto . +.TP +.BR "[--soft]" +Matches if the packet includes all specified headers with +.BR --header , +AT LEAST. |