2
# Shorewall6 version 4 - Tcfilters File
4
# For information about entries in this file, type "man shorewall6-tcfilters"
6
# See http://shorewall.net/traffic_shaping.htm for additional information.
8
##############################################################################################
10
# Entries in this file cause packets to be classified for traffic
13
# Beginning with Shorewall 4.4.15, the file may contain entries
14
# for both IPv4 and IPv6. By default, all rules apply to IPv6 but
15
# that can be changed by inserting a line as follows:
18
# Following entriess apply to IPv4.
21
# Following entries apply to IPv6
24
# Following entries apply to both IPv4 and IPv6. Each
25
# entry is processed twice; once for IPv4 and once for
28
# The columns in the file are as follows.
30
# CLASS - interface:class
31
# The name or number of an interface defined in
32
# shorewall6-tcdevices(5) followed by a class number
33
# defined for that interface in shorewall6-tcclasses(5).
35
# SOURCE - {-|address}
36
# Source of the packet. May be a host or network address.
37
# DNS names are not allowed.
40
# Destination of the packet. May be a host or network
41
# address. DNS names are not allowed.
43
# PROTO - {-|protocol-number|protocol-name|all}
46
# DEST PORT (Optional) - [-|port-name-or-number]
47
# Destination Ports. A Port name (from services(5)) or a
48
# port number; if the protocol is icmp, this column is
49
# interpreted as the destination icmp-type(s).
51
# SOURCE PORT (Optional) - [-|port-name-or-number]
54
# TOS (Optional) - [-|tos]
55
# Specifies the value of the TOS field. The tos value can
56
# be any of the following:
58
# + tos-minimize-delay
59
# + tos-maximuze-throughput
60
# + tos-maximize-reliability
62
# + tos-normal-service
64
# + hex-number/hex-number
66
# The hex-numbers must be exactly two digits (e.g.,
69
# LENGTH (Optional) - [-|number]
70
# Must be a power of 2 between 32 and 8192 inclusive.
71
# Packets with a total length that is strictly less than
72
# the specified number will match the rule.
77
# Place all 'ping' traffic on interface 1 in class 10.
78
# Note that ALL cannot be used because IPv4 ICMP and IPv6
79
# ICMP are two different protocols.
81
# #CLASS SOURCE DEST PROTO DEST
86
# 1:10 0.0.0.0/0 0.0.0.0/0 icmp echo-request
87
# 1:10 0.0.0.0/0 0.0.0.0/0 icmp echo-reply
91
# 1:10 ::/0 ::/0 icmp6 echo-request
92
# 1:10 ::/0 ::/0 icmp6 echo-reply
94
##############################################################################################
95
#INTERFACE: SOURCE DEST PROTO DEST SOURCE TOS LENGTH
96
#CLASS PORT(S) PORT(S)
added
removed
configfiles/tcfilters.annotated
