Manual:IPv6/Firewall/Filter: Difference between revisions
< Manual:IPv6 | Firewall
Created page with 'Category:Manual' |
|||
(One intermediate revision by the same user not shown) | |||
Line 1: | Line 1: | ||
[[Category:Manual]] | [[Category:Manual]] | ||
{{Versions|v5}} | |||
__TOC__ | |||
==Summary== | |||
<p id="shbox"><b>Sub-menu:</b> <code>/ipv6 firewall filter</code></p> | |||
==Properties== | |||
{{Mr-arg-table-h | |||
|prop=Property | |||
|desc=Description | |||
}} | |||
{{Mr-arg-table | |||
|arg=action | |||
|type=accept {{!}} add-dst-to-address-list {{!}} ... | |||
|default=accept | |||
|desc=Action to take if packet is matched by the rule: | |||
* <var>accept</var> - Accept the packet. It is not passed to the next firewall rule. | |||
* <var>add-dst-to-address-list</var> - Add destination address to [[M:IPv6/Firewall/Address list | address list]] specified by <code>address-list</code> parameter | |||
* <var>add-src-to-address-list</var> - Add source address to [[M:IPv6/Firewall/Address list | address list]] specified by <code>address-list</code> parameter | |||
* <var>drop</var> -Silently drop the packet. | |||
* <var>jump</var> - Jump to the user defined chain specified by the value of <code>jump-target</code> parameter | |||
* <var>log</var> - Add a message to the system log containing following data: in-interface, out-interface, src-mac, protocol, src-ip:port->dst-ip:port and length of the packet. After packet is matched it is passed to the next rule in the list, similar as <code>passthrough</code> | |||
* <var>passthrough</var> - Ignore this rule and go to next one (useful for statistics). | |||
* <var>reject</var> - Drop the packet and send an ICMP reject message | |||
* <var>return</var> - Passes control back to the chain from where the jump took place. | |||
}} | |||
{{Mr-arg-table | |||
|arg=address-list | |||
|type= | |||
|default= | |||
|desc= | |||
}} | |||
{{Mr-arg-table-end | |||
|arg=time | |||
|type= | |||
|default= | |||
|desc= | |||
}} | |||
{{Cont}} | |||
[[Category:Manual|Firewallfilter]] | |||
[[Category:Firewall|Firewallfilter]] | |||
[[Category:IPv6|Firewallfilter]] |
Latest revision as of 16:46, 24 February 2012
Applies to RouterOS: v5
Summary
Sub-menu: /ipv6 firewall filter
Properties
Property | Description |
---|---|
action (accept | add-dst-to-address-list | ...; Default: accept) | Action to take if packet is matched by the rule:
|
address-list (; Default: ) | |
time (; Default: ) |
[ Top | Back to Content ]