Manual:IPv6/Firewall/Filter: Difference between revisions

Latest revision as of 16:46, 24 February 2012

Applies to RouterOS: v5

Sub-menu: /ipv6 firewall filter

Property	Description
`action` (accept \| add-dst-to-address-list \| ...; Default: accept)	Action to take if packet is matched by the rule: `accept` - Accept the packet. It is not passed to the next firewall rule. `add-dst-to-address-list` - Add destination address to address list specified by `address-list` parameter `add-src-to-address-list` - Add source address to address list specified by `address-list` parameter `drop` -Silently drop the packet. `jump` - Jump to the user defined chain specified by the value of `jump-target` parameter `log` - Add a message to the system log containing following data: in-interface, out-interface, src-mac, protocol, src-ip:port->dst-ip:port and length of the packet. After packet is matched it is passed to the next rule in the list, similar as `passthrough` `passthrough` - Ignore this rule and go to next one (useful for statistics). `reject` - Drop the packet and send an ICMP reject message `return` - Passes control back to the chain from where the jump took place.
`address-list` (; Default: )
`time` (; Default: )

@@ Line 11: / Line 11: @@
 ==Properties==
+{{Mr-arg-table-h
+|prop=Property
+|desc=Description
+}}
+{{Mr-arg-table
+|arg=action
+|type=accept {{!}} add-dst-to-address-list {{!}} ...
+|default=accept
+|desc=Action to take if packet is matched by the rule:
+* <var>accept</var> - Accept the packet. It is not passed to the next firewall rule.
+* <var>add-dst-to-address-list</var> - Add destination address to [[M:IPv6/Firewall/Address list | address list]] specified by <code>address-list</code> parameter
+* <var>add-src-to-address-list</var> - Add source address to [[M:IPv6/Firewall/Address list | address list]] specified by <code>address-list</code> parameter
+* <var>drop</var> -Silently drop the packet.
+* <var>jump</var> - Jump to the user defined chain specified by the value of <code>jump-target</code> parameter
+* <var>log</var> - Add a message to the system log containing following data: in-interface, out-interface, src-mac, protocol, src-ip:port->dst-ip:port and length of the packet. After packet is matched it is passed to the next rule in the list, similar as <code>passthrough</code>
+* <var>passthrough</var> - Ignore this rule and go to next one (useful for statistics).
+* <var>reject</var> - Drop the packet and send an ICMP reject message
+* <var>return</var> - Passes control back to the chain from where the jump took place.
+}}
+{{Mr-arg-table
+|arg=address-list
+|type=
+|default=
+|desc=
+}}
+{{Mr-arg-table-end
+|arg=time
+|type=
+|default=
+|desc=
+}}
 {{Cont}}