dst-port ( integer : 0 ..65535 | integer : 0 ..65535 ) - destination port number or range
hotspot ( multiple choice: from-client | auth | local-dst ) - matches packets received from clients
against various Hot-Spot. All values can be negated
• from-client - true, if a packet comes from HotSpot client
• auth - true, if a packet comes from authenticted client
• local-dst - true, if a packet has local destination IP address
icmp-options ( integer | integer ) - matches ICMP Type:Code fields
in-interface ( name ) - interface the packet has entered the router through
ipv4-options ( any | loose-source-routing | no-record-route | no-router-alert | no-source-routing |
no-timestamp | none | record-route | router-alert | strict-source-routing | timestamp ) - match ipv4
header options
• any - match packet with at least one of the ipv4 options
• loose-source-routing - match packets with loose source routing option. This option is used to
route the internet datagram based on information supplied by the source
• no-record-route - match packets with no record route option. This option is used to route the
internet datagram based on information supplied by the source
• no-router-alert - match packets with no router alter option
• no-source-routing - match packets with no source routing option
• no-timestamp - match packets with no timestamp option
• record-route - match packets with record route option
• router-alert - match packets with router alter option
• strict-source-routing - match packets with strict source routing option
• timestamp - match packets with timestamp
jump-target ( dstnat | srcnat | name ) - name of the target chain to jump to, if the action=jump is
used
limit ( integer | time | integer ) - restricts packet match rate to a given limit. Usefull to reduce the
amount of log messages
• Count - maximum average packet rate, measured in packets per second (pps), unless followed
by Time option
• Time - specifies the time interval over which the packet rate is measured
• Burst - number of packets to match in a burst
log-prefix ( text ) - all messages written to logs will contain the prefix specified herein. Used in
conjunction with action=log
nth ( integer | integer : 0 ..15 | integer ) - match a particular Nth packet received by the rule. One of
16 available counters can be used to count packets
• Every - match every Every+1th packet. For example, if Every=1 then the rule matches every
2nd packet
• Counter - specifies which counter to use. A counter increments each time the rule containing
nth match matches
• Packet - match on the given packet number. The value by obvious reasons must be between 0
and Every. If this option is used for a given counter, then there must be at least Every+1 rules
with this option, covering all values between 0 and Every inclusively.
Page 461 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
To Next Page
Loading...