Correct minor nit - to filter out SYN packets, the keyword is
`syn' not `tcpsyn' (which matches `tcp' which blocks all tcp packets)
This commit is contained in:
parent
bba017cc52
commit
d1234eaa5a
@ -67,7 +67,7 @@ The <proto/addr pattern> is:
|
||||
tcp[syn]|udp from <src addr/mask>[ports] to <dst addr/mask>[ports][via <via>]
|
||||
all matches any IP packet.
|
||||
icmp,tcp and udp - packets for corresponding protocols.
|
||||
tcpsyn - tcp SYN packets (which used when initiating connection).
|
||||
syn - tcp SYN packets (which used when initiating connection).
|
||||
|
||||
|
||||
The order of from/to/via keywords is unimportant.You can skip any
|
||||
|
Loading…
Reference in New Issue
Block a user