Справочник Пользователя для Alcatel-Lucent speedtouch 500

Firewall Commands

srcportend

The source TCP/UDP port range end (inclusive).
(Only applicable for ranges)
Select one of the supported TCP/UDP port names (See 

 for a listing of 

TCP/UDP port names supported by the SpeedTouch™).
Alternatively, specify the protocol number.

OPTIONAL

dstport

The TCP/UDP port (or beginning of range) the packet should [or 
should NOT] be going to.
Select one of the supported TCP/UDP port names (See 

 for a listing of 

TCP/UDP port names supported by the SpeedTouch™).
Alternatively, specify the protocol number.

OPTIONAL

dstportend

The destination TCP/UDP port range end (inclusive).
(Only applicable for ranges)
Select one of the supported TCP/UDP port names (See 

 for a listing of 

TCP/UDP port names supported by the SpeedTouch™).
Alternatively, specify the protocol number.

OPTIONAL

icmptype

The expected [or NOT expected] ICMP type (name or number) of 
the packet.
Select one of the supported ICMP type names (See 

 for a listing of ICMP type names 

supported by the SpeedTouch™).
Alternatively, specify the protocol number.

OPTIONAL

icmpcode

A number between 0 and 15.
Represents the expected [or NOT expected] ICMP code (or begin-
ning of range) of the packet as specified in the latest version of 
RFC1700: Assigned number.

OPTIONAL

icmpcodeend

A number between 0 and 15.
Represents the ICMP code range end.
Only applicable for ranges.

OPTIONAL

clink

The name of the chain to be parsed when this rule applies. (action is 
ignored).

OPTIONAL

log

Logging is done when this rule applies.

OPTIONAL

action

Action to be taken when this rule applies. Choose between:

•

accept: the packet may pass.

•

deny: ICMP error destination unreachable. An error message 
is sent back to the sender.

•

drop: packet disappears. It is silently dropped, that is, without 
sending an error message to the sender.

•

count: update of statistics. Has no influence on the packet.

REQUIRED