be matched. (Default: 0-255)
DestinationUnreachable
Enable matching of Destination Unreachable mes-
sages. (Default: No)
DestinationUnreachableCodes
Specifies which Destination Unreachable message
codes should be matched. (Default: 0-255)
PacketTooBig
Enable matching of Packet Too Big messages.
(Default: No)
PacketTooBigCodes
Specifies which Packet Too Big message codes
should be matched. (Default: 0-255)
TimeExceeded
Enable matching of Time Exceeded messages.
(Default: No)
TimeExceededCodes
Specifies which Time Exceeded message codes
should be matched. (Default: 0-255)
ParameterProblem
Enable matching of Parameter Problem messages.
(Default: No)
ParameterProblemCodes
Specifies which Parameter Problem message codes
should be matched. (Default: 0-255)
PassICMPReturn
Enable passing an ICMP error message only if it is
related to an existing connection using this service.
(Default: No)
ALG
An Application Layer Gateway (ALG), capable of
managing advanced protocols, can be specified for
this service. (Optional)
MaxSessions
Specifies how many concurrent sessions that are per-
mitted using this service. (Default: 200)
Comments
Text describing the current object. (Optional)
3.51.4. ServiceIPProto
Description
An IP Protocol Service is a definition of an IP protocol with specific parameters.
Properties
Name
Specifies a symbolic name for the service.
(Identifier)
IPProto
IP protocol number or range, e.g. "1-4,7" will match
the protocols ICMP, IGMP, GGP, IP-in-IP and CBT.
(Default: 0-255)
PassICMPReturn
Enable passing an ICMP error message only if it is
related to an existing connection using this service.
(Default: No)
ALG
An Application Layer Gateway (ALG), capable of
3.51.4. ServiceIPProto Chapter 3. Configuration Reference
169