Cluster I/O Protocols (CIP) Configuration and Management Manual (H06.16+, J06.05+)
hl
Matches the Hop Limit field in the IPv6 header.
[!] --hl-eq value
--hl-lt value
--hl-gt value
icmp6
Matches ICMPv6-specific values.
[!] --icmp-type {type[/code]|typename}
Allows specification of the ICMPv6 type, which can be a numeric ICMPv6 type, type and code,
or one of the ICMPv6 type names shown by the command:
ip6tables -p ipv6-icmp -h
iprange
Matches on a given arbitrary range of IP addresses.
[!] --src-range from[-to]
[!] --dst-range from[-to]
ipv6header
Matches IPv6 extension headers and/or upper layer header.
--soft
[!] --header header[,header...]
length
Matches the length of a packet against a value or range of values.
[!] --length length[:length]
limit
Matches a rule to a specified rate. A rule using this extension will match until this limit is reached
(unless the '!' flag is used).
[!] --limit rate [/second|/minute|/hour|/day]
--limit-burst number
mac
Matches source MAC address.
[!] --mac-source address
mark *
Matches packets with value previously set by MARK target.
Not supported because it is valid only in the mangle table.
mh *
Matches the Mobility Header (MH) type.
Not supported because CIP does not support ipv6-mh protocol.
multiport
Matches a set of source or destination ports.
[!] --source-ports | --sports port[,port|,port:port]...
[!] --destination-ports | --dports port[,port|,port:port]...
[!] --ports port[,port|,port:port]...
owner *
Matches various characteristics of the (locally generated) packet creator.
329










