blob: a99886145a40c3d03a713839427b31b4141f58d3 [file] [log] [blame]
Yasuyuki KOZAKAI28e5b792006-01-30 08:50:09 +00001This module matches IPv6 extension headers and/or upper layer header.
Henrik Nordstromc2794132004-01-22 15:04:24 +00002.TP
Jan Engelhardtfea74bf2009-01-12 04:53:18 +01003\fB\-\-soft\fP
Patrick McHardy510aef92008-06-02 12:48:48 +02004Matches if the packet includes \fBany\fP of the headers specified with
Jan Engelhardtfea74bf2009-01-12 04:53:18 +01005\fB\-\-header\fP.
Patrick McHardy510aef92008-06-02 12:48:48 +02006.TP
Jan Engelhardtfea74bf2009-01-12 04:53:18 +01007[\fB!\fP] \fB\-\-header\fP \fIheader\fP[\fB,\fP\fIheader\fP...]
Yasuyuki KOZAKAI28e5b792006-01-30 08:50:09 +00008Matches the packet which EXACTLY includes all specified headers. The headers
9encapsulated with ESP header are out of scope.
Patrick McHardy510aef92008-06-02 12:48:48 +020010Possible \fIheader\fP types can be:
Henrik Nordstromc2794132004-01-22 15:04:24 +000011.TP
Jan Engelhardtfea74bf2009-01-12 04:53:18 +010012\fBhop\fP|\fBhop\-by\-hop\fP
Patrick McHardy510aef92008-06-02 12:48:48 +020013Hop-by-Hop Options header
14.TP
15\fBdst\fP
16Destination Options header
17.TP
18\fBroute\fP
19Routing header
20.TP
21\fBfrag\fP
22Fragment header
23.TP
24\fBauth\fP
25Authentication header
26.TP
27\fBesp\fP
28Encapsulating Security Payload header
29.TP
30\fBnone\fP
31No Next header which matches 59 in the 'Next Header field' of IPv6 header or
32any IPv6 extension headers
33.TP
34\fBproto\fP
35which matches any upper layer protocol header. A protocol name from
36/etc/protocols and numeric value also allowed. The number 255 is equivalent to
37\fBproto\fP.