blob: a99886145a40c3d03a713839427b31b4141f58d3 [file] [log] [blame]
This module matches IPv6 extension headers and/or upper layer header.
Matches if the packet includes \fBany\fP of the headers specified with
[\fB!\fP] \fB\-\-header\fP \fIheader\fP[\fB,\fP\fIheader\fP...]
Matches the packet which EXACTLY includes all specified headers. The headers
encapsulated with ESP header are out of scope.
Possible \fIheader\fP types can be:
Hop-by-Hop Options header
Destination Options header
Routing header
Fragment header
Authentication header
Encapsulating Security Payload header
No Next header which matches 59 in the 'Next Header field' of IPv6 header or
any IPv6 extension headers
which matches any upper layer protocol header. A protocol name from
/etc/protocols and numeric value also allowed. The number 255 is equivalent to