Lines Matching full:allows
10 This allows you to classify packets from ingress using the Netfilter
18 This allows you to classify packets before transmission using the
172 extension. This allows you to attach timeout policies to flow
182 This allows you to store the flow start-time and to obtain
231 machine, then you may want to enable this feature. This allows the
391 fine-grain tuning. This allows you to attach specific timeout
423 The NAT option allows masquerading, port forwarding and other
477 allows you to construct mappings between matchings and actions
626 This option allows using the FIB expression from the inet table.
643 This option allows matching for the presence or absence of a
651 This option allows matching packets from an specific OS.
669 The SYNPROXY expression allows you to intercept TCP connections and
671 server. This allows to avoid conntrack and server resource usage
699 This option allows using the FIB expression from the netdev table.
779 Netfilter mark matching allows you to match packets based on the
781 The target allows you to create rules in the "mangle" table which alter
795 Netfilter allows you to store a mark value per connection (a.k.a.
881 This options adds a `CT' target, which allows to specify initial
892 This option adds a `DSCP' target, which allows you to manipulate
897 It also adds the "TOS" target, which allows you to create rules in
925 The target allows you to create rules in the "raw" and "mangle" tables
949 This option adds a `LED' target, which allows you to blink LEDs in
974 This option adds a `LOG' target, which allows you to create rules in
1011 This option enables the NFLOG target, which allows to LOG
1039 This option adds a `RATEEST' target, which allows to measure
1110 The TRACE target allows you to mark packets so that the kernel
1122 The SECMARK target allows security marking of network
1132 This option adds a `TCPMSS' target, which allows you to alter the
1159 This option adds a "TCPOPTSTRIP" target, which allows you to strip
1170 This option allows you to match what routing thinks of an address,
1191 Socket/process control group matching allows you to match locally
1200 This option allows you to build work-load-sharing clusters of
1215 This option adds a `comment' dummy-match, which allows you to put
1226 This option adds a `connbytes' match, which allows you to match the
1238 This match allows you to test and assign userspace-defined labels names
1251 This match allows you to match against the number of parallel
1271 It allows matching on additional conntrack information, which is
1281 CPU matching allows you to match packets based on the CPU
1302 This options adds a `devgroup' match, which allows to match on the
1311 This option adds a `DSCP' match, which allows you to match against
1316 It will also add a "tos" match, which allows you to match packets
1326 This option adds an "ECN" match, which allows you to match against
1335 This match extension allows you to match a range of SPIs
1360 Helper matching allows you to match packets in dynamic connections
1369 HL matching allows you to match packets based on the hoplimit
1377 This match extension allows you to match a range of CPIs(16 bits)
1386 This option adds a "iprange" match, which allows you to match based on
1398 This option allows you to match against IPVS properties of a packet.
1407 This option adds an "L2TP" match, which allows you to match against
1416 This option allows you to match the length of a packet against a
1425 limit matching allows you to control the rate at which a rule can be
1435 MAC matching allows you to match packets based on the source
1453 Multiport matching allows you to match TCP or UDP packets based on
1464 This option allows you to use the extended accounting through
1475 that allows to passively match the remote operating system by
1487 Socket owner matching allows you to match locally-generated packets
1496 Policy matching allows you to match packets based on the
1516 Packet type matching allows you to match a packet by
1528 This option adds a `quota' match, which allows to match on a
1539 This option adds a `rateest' match, which allows to match on the
1549 This option adds a `realm' match, which allows you to use the realm
1603 Connection state matching allows you to match packets based on their
1613 This option adds a `statistic' match, which allows you to match
1626 This option adds a `string' match, which allows you to look for
1635 This option adds a `tcpmss' match, which allows you to examine the
1645 This option adds a "time" match, which allows you to match based on
1659 u32 allows you to extract quantities of up to 4 bytes from a packet,