xref: /aosp_15_r20/external/iptables/extensions/libxt_tcp.txlate (revision a71a954618bbadd4a345637e5edcf36eec826889)
1*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p tcp -i eth0 --sport 53 -j ACCEPT
2*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT iifname "eth0" tcp sport 53 counter accept'
3*a71a9546SAutomerger Merge Worker
4*a71a9546SAutomerger Merge Workeriptables-translate -A OUTPUT -p tcp -o eth0 --dport 53:66 -j DROP
5*a71a9546SAutomerger Merge Workernft 'add rule ip filter OUTPUT oifname "eth0" tcp dport 53-66 counter drop'
6*a71a9546SAutomerger Merge Worker
7*a71a9546SAutomerger Merge Workeriptables-translate -I OUTPUT -p tcp -d 8.8.8.8 -j ACCEPT
8*a71a9546SAutomerger Merge Workernft 'insert rule ip filter OUTPUT ip protocol tcp ip daddr 8.8.8.8 counter accept'
9*a71a9546SAutomerger Merge Worker
10*a71a9546SAutomerger Merge Workeriptables-translate -I OUTPUT -p tcp --dport 1020:1023 --sport 53 -j ACCEPT
11*a71a9546SAutomerger Merge Workernft 'insert rule ip filter OUTPUT tcp sport 53 tcp dport 1020-1023 counter accept'
12*a71a9546SAutomerger Merge Worker
13*a71a9546SAutomerger Merge Workeriptables -A INPUT -p tcp --tcp-flags ACK,FIN FIN -j DROP
14*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT tcp flags fin / fin,ack counter drop'
15*a71a9546SAutomerger Merge Worker
16*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p tcp --syn -j ACCEPT
17*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT tcp flags syn / fin,syn,rst,ack counter accept'
18*a71a9546SAutomerger Merge Worker
19*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p tcp --syn --dport 80 -j ACCEPT
20*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT tcp dport 80 tcp flags syn / fin,syn,rst,ack counter accept'
21*a71a9546SAutomerger Merge Worker
22*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -f -p tcp
23*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT ip frag-off & 0x1fff != 0 ip protocol tcp counter'
24*a71a9546SAutomerger Merge Worker
25*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT ! -f -p tcp --dport 22
26*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT ip frag-off & 0x1fff 0 tcp dport 22 counter'
27*a71a9546SAutomerger Merge Worker
28*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p tcp --tcp-option 23
29*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT tcp option 23 exists counter'
30*a71a9546SAutomerger Merge Worker
31*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p tcp ! --tcp-option 23
32*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT tcp option 23 missing counter'
33