1
.TH IP6TABLES 8 "" "@PACKAGE_AND_VERSION@" "@PACKAGE_AND_VERSION@"
1
.TH IP6TABLES 8 "" "iptables 1.4.4" "iptables 1.4.4"
3
3
.\" Man page written by Andras Kis-Szabo <kisza@sch.bme.hu>
4
4
.\" It is based on iptables man page.
28
ip6tables - IPv6 packet filter administration
28
ip6tables \(em IPv6 packet filter administration
30
30
\fBip6tables\fP [\fB\-t\fP \fItable\fP] {\fB\-A\fP|\fB\-D\fP} \fIchain
31
31
rule-specification\fP [\fIoptions...\fP]
42
42
\fBip6tables\fP [\fB\-t\fP \fItable\fP] \fB\-S\fP [\fIchain\fP [\fIrulenum\fP]]
44
44
\fBip6tables\fP [\fB\-t\fP \fItable\fP] {\fB\-F\fP|\fB\-L\fP|\fB\-Z\fP}
45
[\fIchain\fP] [\fIoptions...\fP]
45
[\fIchain\fP [\fIrulenum\fP]] [\fIoptions...\fP]
47
47
\fBip6tables\fP [\fB\-t\fP \fItable\fP] \fB\-N\fP \fIchain\fP
176
176
\fB\-S\fP, \fB\-\-list\-rules\fP [\fIchain\fP]
177
177
Print all rules in the selected chain. If no chain is selected, all
178
chains are printed like ip6tables\-save. Like every other ip6tables command,
178
chains are printed like ip6tables-save. Like every other ip6tables command,
179
179
it applies to the specified table (filter is the default).
181
181
\fB\-F\fP, \fB\-\-flush\fP [\fIchain\fP]
182
182
Flush the selected chain (all the chains in the table if none is given).
183
183
This is equivalent to deleting all the rules one by one.
185
\fB\-Z\fP, \fB\-\-zero\fP [\fIchain\fP]
186
Zero the packet and byte counters in all chains. It is legal to
185
\fB\-Z\fP, \fB\-\-zero\fP [\fIchain\fP [\fIrulenum\fP]]
186
Zero the packet and byte counters in all chains, or only the given chain,
187
or only the given rule in a chain. It is legal to
188
189
\fB\-L\fP, \fB\-\-list\fP
189
190
(list) option as well, to see the counters immediately before they are
240
241
[\fB!\fP] \fB\-s\fP, \fB\-\-source\fP \fIaddress\fP[\fB/\fP\fImask\fP]
241
242
Source specification.
242
\fIAddress\fP can be either a hostname (please note that specifying
243
any name to be resolved with a remote query such as DNS is a really bad idea),
244
a network IPv6 address (with \fB/\fP\fImask\fP), or a plain IPv6 address.
245
(the network name isn't supported now).
243
\fIAddress\fP can be either be a hostname,
244
a network IP address (with \fB/\fP\fImask\fP), or a plain IP address.
245
Names will be resolved once only, before the rule is submitted to the kernel.
246
Please note that specifying any name to be resolved with a remote query such as
247
DNS is a really bad idea.
248
(Resolving network names is not supported at this time.)
246
249
The \fImask\fP is a plain number,
247
250
specifying the number of 1's at the left side of the network mask.
248
251
A "!" argument before the address specification inverts the sense of
249
252
the address. The flag \fB\-\-src\fP
250
253
is an alias for this option.
254
Multiple addresses can be specified, but this will \fBexpand to multiple
255
rules\fP (when adding with \-A), or will cause multiple rules to be
252
258
[\fB!\fP] \fB\-d\fP, \fB\-\-destination\fP \fIaddress\fP[\fB/\fP\fImask\fP]
253
259
Destination specification.