Operation Manual

179
Firewall Commands
E-DOC-CTC-20040210-0030 v1.0
srcintfgrp The interface group the packet should [or should NOT] arrive on.
Choose between:
• wan
• local
• lan.
Note NOT applicable if used in a chain assigned to the output
hook.
OPTIONAL
src The source IP address (range) the packet should [or should NOT]
come from. (Supports cidr notation).
OPTIONAL
dstintf The name of the interface the packet should [or should NOT] be
going to.
Note NOT applicable if used in a chain assigned to the output
hook.
OPTIONAL
dstintfgrp The interface group the packet should [or should NOT] be going to.
Choose between:
• wan
• local
• lan.
Note NOT applicable if used in a chain assigned to the output
hook.
OPTIONAL
dst The destination IP address (range) the packet should [or should
NOT] be going to (supports cidr notation).
OPTIONAL
precedence A number between 0 and 7.
Represents the precedence in the IP packet (part of tos).
OPTIONAL
dscp A number between 0 and 63.
Represents the DSCP in the IP packet (part of tos).
OPTIONAL
tos A number between 0 and 255.
Represents the Type Of Service specification which should be
expected [or NOT expected] in the IP packet. The Type of Service
numbering specification is in accordance to the latest version of
RFC1700: Assigned numbers.
OPTIONAL