Lines Matching refs:OK
47 -p tcp -j DNAT --to-destination [dead::beef-dead::fee7]:1000-2000/65535;=;OK
50 +-p tcp -j DNAT --to-destination dead::beef --random --persistent;=;OK
58 +-p tcp -j DNAT --to-destination :65535;=;OK
60 +-j DNAT -h;;OK
77 -j LOG --log-prefix "test: " --log-tcp-options;=;OK
78 -j LOG --log-prefix "test: " --log-ip-options;=;OK
79 -j LOG --log-prefix "test: " --log-uid;=;OK
80 +-j LOG --log-prefix "test: " --log-macdecode;=;OK
105 -p udp -j MASQUERADE --to-ports 1024-65535;=;OK
114 -p udp -j REDIRECT --to-ports 42-1234;=;OK
115 -p tcp -j REDIRECT --to-ports 42-1234 --random;=;OK
119 +-j REDIRECT -h;;OK
125 -j REJECT --reject-with icmp6-reject-route;=;OK
126 -p tcp -j REJECT --reject-with tcp-reset;=;OK
129 +-j REJECT -h;;OK
135 -p tcp -j SNAT --to-source [dead::beef-dead::fee7]:1025-65535;=;OK
138 +-p tcp -j SNAT --to-source dead::beef --random --random-fully --persistent;=;OK
139 +-p tcp -j SNAT --to-source :65535;=;OK
147 +-j SNAT -h;;OK
155 +-m connlimit --connlimit-upto 0;=;OK
156 +-m connlimit --connlimit-upto 4294967295;=;OK
159 +-m connlimit --connlimit-above 0;=;OK
160 +-m connlimit --connlimit-above 4294967295;=;OK
164 …ve 10 --connlimit-saddr;-m connlimit --connlimit-above 10 --connlimit-mask 128 --connlimit-saddr;OK
165 …ve 10 --connlimit-daddr;-m connlimit --connlimit-above 10 --connlimit-mask 128 --connlimit-daddr;OK
167 +-m connlimit --connlimit-above 10 --connlimit-mask 32 --connlimit-saddr;=;OK
168 +-m connlimit --connlimit-above 10 --connlimit-mask 32 --connlimit-daddr;=;OK
175 -p ipv6-icmp -m icmp6 --icmpv6-type 2;=;OK
178 +-p ipv6-icmp -m icmp6 ! --icmpv6-type 2;=;OK
182 +-p ipv6-icmp -h;;OK
188 -m rt --rt-type 0 --rt-segsleft 1:23 --rt-len 42 --rt-0-res;=;OK
189 -m rt --rt-type 0 ! --rt-segsleft 1:23 ! --rt-len 42 --rt-0-res;=;OK
190 -m rt ! --rt-type 1 ! --rt-segsleft 12:23 ! --rt-len 42;=;OK
191 +-m rt --rt-type 0 --rt-0-addrs beef::feed --rt-0-not-strict;=;OK
196 …-rt-segsleft 1:1 --rt-len 42 --rt-0-res;-m rt --rt-type 0 --rt-segsleft 1 --rt-len 42 --rt-0-res;OK
197 -m rt;=;OK
214 -p tcp -j DNAT --to-destination 1.1.1.1:1000-2000/65535;=;OK
217 +-p tcp -j DNAT --to-destination 1.1.1.1 --random --persistent;=;OK
218 +-p tcp -j DNAT --to-destination :65535;=;OK
219 +-p tcp -j DNAT --to-destination 1.1.1.1:1000;=;OK
226 +-j DNAT -h;;OK
243 -j LOG --log-prefix "test: " --log-tcp-options;=;OK
244 -j LOG --log-prefix "test: " --log-ip-options;=;OK
245 -j LOG --log-prefix "test: " --log-uid;=;OK
246 +-j LOG --log-prefix "test: " --log-macdecode;=;OK
271 -p udp -j MASQUERADE --to-ports 1024-65535;=;OK
281 -j NETMAP --to 1.2.3.0/24;=;OK
282 -j NETMAP --to 1.2.3.4;=;OK
283 +-j NETMAP --to 1.2.3.4/33;;OK
289 -p udp -j REDIRECT --to-ports 42-1234;=;OK
290 -p tcp -j REDIRECT --to-ports 42-1234 --random;=;OK
294 +-j REDIRECT -h;;OK
300 -j REJECT --reject-with icmp-net-prohibited;=;OK
301 -j REJECT --reject-with icmp-host-prohibited;=;OK
302 -j REJECT --reject-with icmp-admin-prohibited;=;OK
304 +-j REJECT -h;;OK
310 -p tcp -j SNAT --to-source 1.1.1.1-1.1.1.10:1025-65535;=;OK
313 +-p tcp -j SNAT --to-source 1.1.1.1 --random --random-fully --persistent;=;OK
314 +-p tcp -j SNAT --to-source :65535;=;OK
315 +-p tcp -j SNAT --to-source 1.1.1.1:1025;=;OK
322 +-j SNAT -h;;OK
330 # -p icmp -m icmp;=;OK
331 +-p icmp -m icmp ! --icmp-type 1/0;=;OK
335 +-p icmp -m icmp -h;;OK
341 -m iprange ! --src-range 1.1.1.1-1.1.1.10;=;OK
342 -m iprange --dst-range 1.1.1.1-1.1.1.10;=;OK
343 -m iprange ! --dst-range 1.1.1.1-1.1.1.10;=;OK
349 +-m iprange --src-range 1.1.1.1;=;OK
350 +-m iprange --dst-range 1.1.1.1;=;OK
352 +-m iprange -h;;OK
358 -m limit --limit 1000/hour;=;OK
359 -m limit --limit 1000/day;=;OK
360 -m limit --limit 1/sec --limit-burst 1;=;OK
367 +-m limit;-m limit --limit 3/hour;OK
368 +-m limit -h;;OK
374 -j ACCEPT;=;OK
375 -j RETURN;=;OK
377 +-j standard -h;;OK
385 -# -m string --algo bm --string "test";=;OK
387 -# -m string --algo kmp --string "test";=;OK
389 -# -m string --algo kmp ! --string "test";=;OK
391 …xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx";=;OK
393 …xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx";=;OK
395 -# -m string --algo bm --hexstring "|0a0a0a0a|";=;OK
397 -# -m string --algo bm --from 0 --to 65535 --string "test";=;OK
398 +-m string --string "test" --algo bm;=;OK
399 +-m string --string "test" --algo kmp;=;OK
400 +-m string ! --string "test" --algo kmp;=;OK
401 …xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" --algo bm;=;OK
403 +-m string --string "\\" --algo bm;-m string --hex-string "|5c|";OK
404 +-m string --hex-string "|0a0a0a0a|" --algo bm;=;OK
405 +-m string ! --hex-string "|0a0a0a0a|" --algo bm;=;OK
406 +-m string --algo bm --hex-string "| 0a|";-m string --hex-string "|0a|";OK
414 +-m string --string "test" --algo bm --from 1 --to 65535;=;OK
418 +-m string --string "test" --algo bm --to 65535 --icase;=;OK
419 +-m string -h;;OK
425 -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG SYN;=;OK
426 -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,PSH,ACK,URG SYN;=;OK
427 -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG RST;=;OK
428 +-p tcp -m tcp --tcp-option 1;=;OK
430 +-p tcp -m tcp ! --tcp-option 1;=;OK
432 -p tcp -m tcp;=;OK