Lines Matching full:allows
10 This allows you to classify packets from ingress using the Netfilter
144 extension. This allows you to attach timeout policies to flow
154 This allows you to store the flow start-time and to obtain
210 machine, then you may want to enable this feature. This allows the
370 fine-grain tuning. This allows you to attach specific timeout
402 The NAT option allows masquerading, port forwarding and other
453 allows you to construct mappings between matchings and actions
555 This option adds the "objref" expression that allows you to refer to
608 This option allows using the FIB expression from the inet table.
625 This option allows matching for the presence or absence of a
633 This option allows matching packets from an specific OS.
651 The SYNPROXY expression allows you to intercept TCP connections and
653 server. This allows to avoid conntrack and server resource usage
681 This option allows using the FIB expression from the netdev table.
724 Netfilter mark matching allows you to match packets based on the
726 The target allows you to create rules in the "mangle" table which alter
740 Netfilter allows you to store a mark value per connection (a.k.a.
826 This options adds a `CT' target, which allows to specify initial
837 This option adds a `DSCP' target, which allows you to manipulate
842 It also adds the "TOS" target, which allows you to create rules in
870 The target allows you to create rules in the "raw" and "mangle" tables
894 This option adds a `LED' target, which allows you to blink LEDs in
920 This option adds a `LOG' target, which allows you to create rules in
957 This option enables the NFLOG target, which allows to LOG
985 This option adds a `RATEEST' target, which allows to measure
1056 The TRACE target allows you to mark packets so that the kernel
1068 The SECMARK target allows security marking of network
1078 This option adds a `TCPMSS' target, which allows you to alter the
1105 This option adds a "TCPOPTSTRIP" target, which allows you to strip
1116 This option allows you to match what routing thinks of an address,
1137 Socket/process control group matching allows you to match locally
1146 This option allows you to build work-load-sharing clusters of
1161 This option adds a `comment' dummy-match, which allows you to put
1172 This option adds a `connbytes' match, which allows you to match the
1184 This match allows you to test and assign userspace-defined labels names
1197 This match allows you to match against the number of parallel
1217 It allows matching on additional conntrack information, which is
1227 CPU matching allows you to match packets based on the CPU
1248 This options adds a `devgroup' match, which allows to match on the
1257 This option adds a `DSCP' match, which allows you to match against
1262 It will also add a "tos" match, which allows you to match packets
1272 This option adds an "ECN" match, which allows you to match against
1281 This match extension allows you to match a range of SPIs
1306 Helper matching allows you to match packets in dynamic connections
1315 HL matching allows you to match packets based on the hoplimit
1323 This match extension allows you to match a range of CPIs(16 bits)
1332 This option adds a "iprange" match, which allows you to match based on
1344 This option allows you to match against IPVS properties of a packet.
1353 This option adds an "L2TP" match, which allows you to match against
1362 This option allows you to match the length of a packet against a
1371 limit matching allows you to control the rate at which a rule can be
1381 MAC matching allows you to match packets based on the source
1399 Multiport matching allows you to match TCP or UDP packets based on
1410 This option allows you to use the extended accounting through
1421 that allows to passively match the remote operating system by
1433 Socket owner matching allows you to match locally-generated packets
1442 Policy matching allows you to match packets based on the
1462 Packet type matching allows you to match a packet by
1474 This option adds a `quota' match, which allows to match on a
1485 This option adds a `rateest' match, which allows to match on the
1495 This option adds a `realm' match, which allows you to use the realm
1549 Connection state matching allows you to match packets based on their
1559 This option adds a `statistic' match, which allows you to match
1572 This option adds a `string' match, which allows you to look for
1581 This option adds a `tcpmss' match, which allows you to examine the
1591 This option adds a "time" match, which allows you to match based on
1605 u32 allows you to extract quantities of up to 4 bytes from a packet,