1*a71a9546SAutomerger Merge WorkerThis module matches Stream Control Transmission Protocol headers. 2*a71a9546SAutomerger Merge Worker.TP 3*a71a9546SAutomerger Merge Worker[\fB!\fP] \fB\-\-source\-port\fP,\fB\-\-sport\fP \fIport\fP[\fB:\fP\fIport\fP] 4*a71a9546SAutomerger Merge Worker.TP 5*a71a9546SAutomerger Merge Worker[\fB!\fP] \fB\-\-destination\-port\fP,\fB\-\-dport\fP \fIport\fP[\fB:\fP\fIport\fP] 6*a71a9546SAutomerger Merge Worker.TP 7*a71a9546SAutomerger Merge Worker[\fB!\fP] \fB\-\-chunk\-types\fP {\fBall\fP|\fBany\fP|\fBonly\fP} \fIchunktype\fP[\fB:\fP\fIflags\fP] [...] 8*a71a9546SAutomerger Merge WorkerThe flag letter in upper case indicates that the flag is to match if set, 9*a71a9546SAutomerger Merge Workerin the lower case indicates to match if unset. 10*a71a9546SAutomerger Merge Worker 11*a71a9546SAutomerger Merge WorkerMatch types: 12*a71a9546SAutomerger Merge Worker.TP 13*a71a9546SAutomerger Merge Workerall 14*a71a9546SAutomerger Merge WorkerMatch if all given chunk types are present and flags match. 15*a71a9546SAutomerger Merge Worker.TP 16*a71a9546SAutomerger Merge Workerany 17*a71a9546SAutomerger Merge WorkerMatch if any of the given chunk types is present with given flags. 18*a71a9546SAutomerger Merge Worker.TP 19*a71a9546SAutomerger Merge Workeronly 20*a71a9546SAutomerger Merge WorkerMatch if only the given chunk types are present with given flags and none are missing. 21*a71a9546SAutomerger Merge Worker 22*a71a9546SAutomerger Merge WorkerChunk types: DATA INIT INIT_ACK SACK HEARTBEAT HEARTBEAT_ACK ABORT SHUTDOWN SHUTDOWN_ACK ERROR COOKIE_ECHO COOKIE_ACK ECN_ECNE ECN_CWR SHUTDOWN_COMPLETE I_DATA RE_CONFIG PAD ASCONF ASCONF_ACK FORWARD_TSN I_FORWARD_TSN 23*a71a9546SAutomerger Merge Worker 24*a71a9546SAutomerger Merge Workerchunk type available flags 25*a71a9546SAutomerger Merge Worker.br 26*a71a9546SAutomerger Merge WorkerDATA I U B E i u b e 27*a71a9546SAutomerger Merge Worker.br 28*a71a9546SAutomerger Merge WorkerI_DATA I U B E i u b e 29*a71a9546SAutomerger Merge Worker.br 30*a71a9546SAutomerger Merge WorkerABORT T t 31*a71a9546SAutomerger Merge Worker.br 32*a71a9546SAutomerger Merge WorkerSHUTDOWN_COMPLETE T t 33*a71a9546SAutomerger Merge Worker 34*a71a9546SAutomerger Merge Worker(lowercase means flag should be "off", uppercase means "on") 35*a71a9546SAutomerger Merge Worker.P 36*a71a9546SAutomerger Merge WorkerExamples: 37*a71a9546SAutomerger Merge Worker 38*a71a9546SAutomerger Merge Workeriptables \-A INPUT \-p sctp \-\-dport 80 \-j DROP 39*a71a9546SAutomerger Merge Worker 40*a71a9546SAutomerger Merge Workeriptables \-A INPUT \-p sctp \-\-chunk\-types any DATA,INIT \-j DROP 41*a71a9546SAutomerger Merge Worker 42*a71a9546SAutomerger Merge Workeriptables \-A INPUT \-p sctp \-\-chunk\-types any DATA:Be \-j ACCEPT 43