install gen-vzdump.conf.5-opts.pl
[pve-docs.git] / pve-firewall-rules-opts.adoc
CommitLineData
696fb448
DM
1`-dest` `string` ::
2
3Restrict packet destination address. This can refer to a single IP address,
4an IP set ('+ipsetname') or an IP alias definition. You can also specify an
5address range like '20.34.101.207-201.3.9.99', or a list of IP addresses
6and networks (entries are separated by comma). Please do not mix IPv4 and
7IPv6 addresses inside such lists.
8
9`-dport` `string` ::
10
11Restrict TCP/UDP destination port. You can use service names or simple
12numbers (0-65535), as defined in '/etc/services'. Port ranges can be
13specified with '\d+:\d+', for example '80:85', and you can use comma
14separated list to match several ports or ranges.
15
16`-iface` `string` ::
17
18Network interface name. You have to use network configuration key names for
19VMs and containers ('net\d+'). Host related rules can use arbitrary
20strings.
21
22`-proto` `string` ::
23
24IP protocol. You can use protocol names ('tcp'/'udp') or simple numbers, as
25defined in '/etc/protocols'.
26
27`-source` `string` ::
28
29Restrict packet source address. This can refer to a single IP address, an
30IP set ('+ipsetname') or an IP alias definition. You can also specify an
31address range like '20.34.101.207-201.3.9.99', or a list of IP addresses
32and networks (entries are separated by comma). Please do not mix IPv4 and
33IPv6 addresses inside such lists.
34
35`-sport` `string` ::
36
37Restrict TCP/UDP source port. You can use service names or simple numbers
38(0-65535), as defined in '/etc/services'. Port ranges can be specified with
39'\d+:\d+', for example '80:85', and you can use comma separated list to
40match several ports or ranges.
41