Manual:IPv6/Firewall/Filter: Difference between revisions

From MikroTik Wiki
Jump to navigation Jump to search
(Created page with 'Category:Manual')
 
 
(One intermediate revision by the same user not shown)
Line 1: Line 1:
[[Category:Manual]]
[[Category:Manual]]
{{Versions|v5}}
__TOC__
==Summary==
<p id="shbox"><b>Sub-menu:</b> <code>/ipv6 firewall filter</code></p>
==Properties==
{{Mr-arg-table-h
|prop=Property
|desc=Description
}}
{{Mr-arg-table
|arg=action
|type=accept {{!}} add-dst-to-address-list {{!}} ...
|default=accept
|desc=Action to take if packet is matched by the rule:
* <var>accept</var> - Accept the packet. It is not passed to the next firewall rule.
* <var>add-dst-to-address-list</var> - Add destination address to [[M:IPv6/Firewall/Address list | address list]] specified by <code>address-list</code> parameter
* <var>add-src-to-address-list</var> - Add source address to [[M:IPv6/Firewall/Address list | address list]] specified by <code>address-list</code> parameter
* <var>drop</var> -Silently drop the packet.
* <var>jump</var> - Jump to the user defined chain specified by the value of <code>jump-target</code> parameter
* <var>log</var> - Add a message to the system log containing following data: in-interface, out-interface, src-mac, protocol, src-ip:port->dst-ip:port and length of the packet. After packet is matched it is passed to the next rule in the list, similar as <code>passthrough</code>
* <var>passthrough</var> - Ignore this rule and go to next one (useful for statistics).
* <var>reject</var> - Drop the packet and send an ICMP reject message
* <var>return</var> - Passes control back to the chain from where the jump took place.
}}
{{Mr-arg-table
|arg=address-list
|type=
|default=
|desc=
}}
{{Mr-arg-table-end
|arg=time
|type=
|default=
|desc=
}}
{{Cont}}
[[Category:Manual|Firewallfilter]]
[[Category:Firewall|Firewallfilter]]
[[Category:IPv6|Firewallfilter]]

Latest revision as of 14:46, 24 February 2012


Version.png

Applies to RouterOS: v5


Summary

Sub-menu: /ipv6 firewall filter

Properties

Property Description
action (accept | add-dst-to-address-list | ...; Default: accept) Action to take if packet is matched by the rule:
  • accept - Accept the packet. It is not passed to the next firewall rule.
  • add-dst-to-address-list - Add destination address to address list specified by address-list parameter
  • add-src-to-address-list - Add source address to address list specified by address-list parameter
  • drop -Silently drop the packet.
  • jump - Jump to the user defined chain specified by the value of jump-target parameter
  • log - Add a message to the system log containing following data: in-interface, out-interface, src-mac, protocol, src-ip:port->dst-ip:port and length of the packet. After packet is matched it is passed to the next rule in the list, similar as passthrough
  • passthrough - Ignore this rule and go to next one (useful for statistics).
  • reject - Drop the packet and send an ICMP reject message
  • return - Passes control back to the chain from where the jump took place.
address-list (; Default: )
time (; Default: )

[ Top | Back to Content ]