.TH IP6TABLES 8 "Mar 09, 2002" "" ""
.\"
.\" Man page written by Andras Kis-Szabo <kisza@sch.bme.hu>
.\" It is based on iptables man page.
.\"
.\" iptables page by Herve Eychenne <rv@wallfire.org>
.\" It is based on ipchains man page.
.\"
.\" ipchains page by Paul ``Rusty'' Russell March 1997
.\" Based on the original ipfwadm man page by Jos Vos <jos@xos.nl>
.\"
.\"	This program is free software; you can redistribute it and/or modify
.\"	it under the terms of the GNU General Public License as published by
.\"	the Free Software Foundation; either version 2 of the License, or
.\"	(at your option) any later version.
.\"
.\"	This program is distributed in the hope that it will be useful,
.\"	but WITHOUT ANY WARRANTY; without even the implied warranty of
.\"	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
.\"	GNU General Public License for more details.
.\"
.\"	You should have received a copy of the GNU General Public License
.\"	along with this program; if not, write to the Free Software
.\"	Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
.\"
.\"
.\" Japanese Version Copyright (c) 2001-2004 Yuichi SATO
.\"         all right reserved.
.\" Translated Sat Dec  1 06:32:08 JST 2001
.\"         by Yuichi SATO <ysato@h4.dion.ne.jp>
.\" Updated & Modified Sun Feb  8 14:05:26 JST 2004
.\"         by Yuichi SATO <ysato444@yahoo.co.jp>
.\"
.\"WORD:	chain		
.\"WORD:	built-in chain	Ȥ߹ߺѤߥ
.\"WORD:	non-terminating target  λå
.\"
.SH ̾
ip6tables \- IPv6 ѥåȥե륿
.SH 
.BR "ip6tables [-t ơ֥] -[AD] " " 롼ξܺ [ץ]"
.br
.BR "ip6tables [-t ơ֥] -I " " [롼ֹ] 롼ξܺ [ץ]"
.br
.BR "ip6tables [-t ơ֥] -R " " 롼ֹ 롼ξܺ [ץ]"
.br
.BR "ip6tables [-t ơ֥] -D " " 롼ֹ [ץ]"
.br
.BR "ip6tables [-t ơ֥] -[LFZ] " "[] [ץ]"
.br
.BR "ip6tables [-t ơ֥] -N " ""
.br
.BR "ip6tables [-t ơ֥] -X " "[]"
.br
.BR "ip6tables [-t ơ֥] -P " " å [ץ]"
.br
.BR "ip6tables  [-t ơ֥] -E " "̾ ̾"
.SH 
.B ip6tables
 Linux ͥ IPv6 ѥåȥե륿롼Υơ֥
ꡦ뤿˻Ȥ롣
ʣΰۤʤơ֥뤬ǽ롣
ƥơ֥Ȥ߹ߺѤߥޤࡣ
˥桼ΥޤळȤǤ롣

ƥϡѥåȷ˥ޥå롼ΥꥹȤǤ롣
ƥ롼ϥޥåѥåȤФƲ򤹤뤫ꤹ롣
ϡ֥åȡפȸƤФ졢
Ʊơ֥Υ桼˥פ뤳Ȥ⤢롣

.SH å
եΥ롼ϡѥåȤȽǤȥåȤꤹ롣
ѥåȤޥåʤ硢μΥ롼뤬ɾ롣
ѥåȤޥå硢
åȤͤˤäƼΥ롼뤬ꤵ롣
åȤͤϡ桼̾ޤ̤
.IR ACCEPT ,
.IR DROP ,
.IR QUEUE ,
.I RETURN
Τ 1 ĤǤ롣
.PP
.I ACCEPT 
ϥѥåȤ̤Ȥ̣Ǥ롣
.I DROP
ϥѥåȤ򾲤 (ΤƤ) Ȥ̣Ǥ롣
.I QUEUE
ϥѥåȤ桼֤ϤȤ̣Ǥ
(ͥ뤬ݡȤƤФǤ뤬)
.I RETURN
ϡΥƤ뤳Ȥߤơ
 (ƤӽФ¦) μΥ롼ߤȤ̣Ǥ롣
Ȥ߹ߺѤߥκǸã硢
ޤϥå
.I RETURN
ޤޤƤȤ߹ߺѤߥΥ롼˥ޥå硢
ݥꥷǻꤵ줿åȤ
ѥåȤιꤹ롣
.SH ơ֥
ߤΤȤ 2 ĤΩʥơ֥뤬¸ߤ
(ɤΥơ֥뤬ɤλǸ뤫ϡ
ͥɤä⥸塼뤬¸ߤ뤫˰¸)
nat ơ֥ϡޤƤʤ
.TP
.BI "-t, --table " "table"
ΥץϡɤΥޥɤŬѤ٤ꤹ뤿
ѥåȥޥå󥰥ơ֥ꤹ롣
ͥ˼ư⥸塼ǥ󥰤ꤵƤ硢
ơ֥ФŬڤʥ⥸塼뤬ޤɤƤʤС
Υ⥸塼ΥɤԤ

ơ֥ϰʲ̤Ǥ롣
.RS
.TP .4i
.BR "filter" :
(-t ץ󤬻ꤵƤʤ) 줬ǥեȤΥơ֥Ǥ롣
ˤ
.B INPUT
(ޥΤäƤѥåȤФ)
.B FORWARD
(ޥͳѥåȤФ)
.B OUTPUT
(ޥ줿ѥåȤФ)
ȤȤ߹ߺѤߥ󤬴ޤޤ롣
.TP
.BR "mangle" :
Υơ֥̤ʥѥåѴ˻Ȥ롣
ͥ 2.4.17 ޤǤϡ
.B PREROUTING
(ѥåȤäƤ硢
ˤΥѥåȤѴ뤿Υ)
.B OUTPUT
(줿ѥåȤ
롼ƥ󥰤Ѵ뤿Υ)
Ȥ 2 ĤȤ߹ߺѤߥ󤬴ޤޤƤ
ͥ 2.4.18 ϡ¾
.B INPUT
(ޥΤäƤѥåȤФ)
.B FORWARD
(ޥͳѥåȤФ)
.B POSTROUTING
(ѥåȤФƹԤȤѴ뤿Υ)
Ȥ 3 ĤȤ߹ߺѤߥ⥵ݡȤ롣
.RE
.SH ץ
.B ip6tables
ǻȤ륪ץϡĤΥ롼פʬ롣
.SS ޥ
Υץϡ¹Ԥưꤹ롣
ʲǵĤƤʤ¤ꡢ
 1 Ĥޥɥ饤ǻꤹ뤳ȤǤʤ
ĹСΥޥ̾ȥץ̾ϡ
.B ip6tables
¾Υޥ̾䥪ץ̾ȶ̤ǤϰϤ
(ʸά) ꤹ뤳ȤǤ롣
.TP
.BI "-A, --append " "chain rule-specification"
򤵤줿κǸ 1 İʾΥ롼ɲä롣
̾ 1 İʾΥɥ쥹бƤ硢
ǽʥɥ쥹ȹ礻Τ줾ˤĤƥ롼뤬ɲä롣
.TP
.BI "-D, --delete " "chain rule-specification"
.ns
.TP
.BI "-D, --delete " "chain rulenum"
򤵤줿󤫤 1 İʾΥ롼롣
Υޥɤˤ 2 ĤλȤ:
ֹ (ǽΥ롼 1 Ȥ) ꤹȡ
ޥå롼ꤹǤ롣
.TP
.B "-I, --insert"
򤵤줿˥롼ֹꤷ 1 İʾΥ롼롣
롼ֹ椬 1 ξ硢롼ϥƬ롣
ϥ롼ֹ椬ꤵʤΥǥեȤǤ⤢롣
.TP
.BI "-R, --replace " "chain rulenum rule-specification"
򤵤줿ˤ롼֤롣
̾ 1 İʾΥɥ쥹бƤϼԤ롣
롼ˤ 1 Ϥޤֹ椬դƤ롣
.TP
.BR "-L, --list " "[\fIchain\fP]"
򤵤줿ˤƤΥ롼ɽ롣
󤬻ꤵʤ硢ƤΥˤꥹȤɽ롣
¾γ iptables ޥɤƱͤˡ
ꤵ줿ơ֥ (ǥեȤ filter) ФƺѤ롣
ä mangle 롼ɽˤϰʲΤ褦ˤ롣
.nf
 ip6tables -t mangle -n -L
.fi
DNS εհ򤱤뤿ˡ褯
.B -n
ץȶ˻Ѥ롣
.B -Z
() ץƱ˻ꤹ뤳ȤǤ롣
ξ硢˥ꥹȤơ
(: ѥåȥ󥿤ȥХȥ󥿤) ˤ롣
ɤΤ褦˽Ϥ뤫ϡͿ¾ΰ˱ƶ롣
.nf
 ip6tables -L -v
.fi
Ȥʤ¤ꡢ(: -v ץꤷʤ¤)
ºݤΥ롼뤽ΤΤɽʤ
.TP
.BR "-F, --flush " "[\fIchain\fP]"
򤵤줿
(ꤵʤХơ֥ƤΥ) Ƥõ롣
ƤΥ롼 1 ĤĺΤƱǤ롣
.TP
.BR "-Z, --zero " "[\fIchain\fP]"
٤ƤΥΥѥåȥ󥿤ȥХȥ󥿤򥼥ˤ롣
ꥢľΥ󥿤򸫤뤿ˡ
.B "-L, --list"
(ɽ) ץƱ˻ꤹ뤳ȤǤ (嵭򻲾)
.TP
.BI "-N, --new-chain " "chain"
ꤷ̾ǥ桼롣
Ʊ̾ΥåȤ¸ߤƤϤʤʤ
.TP
.BR "-X, --delete-chain " "[\fIchain\fP]"
ץΥ桼롣
Υ󤬻ȤƤƤϤʤʤ
ˡΥ򻲾ȤƤ롼
뤫֤뤫ʤФʤʤ
Ϳʤ硢ơ֥ˤΤ
Ȥ߹ߺѤߥǤʤΤƺ롣
.TP
.BI "-P, --policy " "chain target"
Υݥꥷ򡢻ꤷåȤꤹ롣
ǽʥåȤϡ\fBå\fRפξϤ򻲾Ȥ뤳ȡ
(桼ǤϤʤ) Ȥ߹ߺѤߥˤݥꥷǤʤ
ޤȤ߹ߺѤߥ桼
ݥꥷΥåȤꤹ뤳ȤϤǤʤ
.TP
.BI "-E, --rename-chain " "old-chain new-chain"
桼ꤷ̾ѹ롣
ϸܤѹʤΤǡơ֥ι¤ˤϲƶʤ
.TP
.B -h
إס
(ΤȤϤȤƤñ) ޥɽ񼰤ɽ롣
.SS ѥ᡼
ʲΥѥ᡼ (add, delete, insert, 
replace, append ޥɤѤ) 롼λͤ롣
.TP
.BR "-p, --protocol " "[!] \fIprotocol\fP"
롼ǻȤץȥ롢ޤϥåѥåȤΥץȥ롣
Ǥץȥϡ
.IR tcp ,
.IR udp ,
.IR ipv6-icmp|icmpv6 ,
.I all
Τ줫 1 ĤͤǤ롣
ͤϡΥץȥ 1 ġ⤷̤Υץȥɽ
/etc/protocols ˤץȥ̾Ǥ롣
ץȥ "!" ֤ȡΥץȥꤷʤȤ̣ˤʤ롣
 0 
.I all

ץȥ
.I all
ƤΥץȥȥޥå
Υץ󤬾ά줿ݤΥǥեȤǤ롣
.TP
.BR "-s, --source " "[!] \fIaddress\fP[/\fImask\fP]"
λꡣ
.I address
ϥۥ̾ (DNS Τ褦ʥ⡼Ȥؤ䤤碌Dz褹̾ꤹΤ
ɤʤ)
ͥåȥ IPv6 ɥ쥹 (/mask ꤹ)
̾ IPv6 ɥ쥹
(ΤȤͥåȥ̾ϥݡȤƤʤ)Τ줫Ǥ롣
.I mask
ϥͥåȥޥ
ͥåȥޥκ¦ˤ 1 οꤹͤǤ롣
Ĥޤꡢ
.I 64
Ȥ mask 
.I ffff:ffff:ffff:ffff:0000:0000:0000:0000

ɥ쥹 "!" ֤ȡΥɥ쥹Ȥ̣ˤʤ롣
ե饰
.B --src
ϡΥץ̾Ǥ롣
.TP
.BR "-d, --destination " "[!] \fIaddress\fP[/\fImask\fP]"
λꡣ
񼰤ξܤˤĤƤϡ
.B -s
() ե饰򻲾Ȥ뤳ȡ
ե饰
.B --dst
ϡΥץ̾Ǥ롣
.TP
.BI "-j, --jump " "target"
롼ΥåȡĤޤꡢ
ѥåȤޥåˤɤ뤫ꤹ롣
åȤϥ桼
(Υ롼뼫ȤäƤʳ) Ǥ⡢
ѥåȤι¨˷ꤹ̤Ȥ߹ߺѤߥåȤǤ⡢
ĥ줿å (ʲ
.RB  åȤγĥ 
򻲾) Ǥ褤
Υץ󤬥롼Ǿά줿硢
롼˥ޥåƤѥåȤι˲ƶʤ
롼Υ󥿤 1 IJû롣
.TP
.BR "-i, --in-interface " "[!] \fIname\fP"
.RB ( INPUT ,
.BR FORWARD ,
.B PREROUTING
Τߤ) ѥåȤ륤󥿡ե̾
󥿡ե̾ "!" ֤ȡ
Υ󥿡եȤ̣ˤʤ롣
󥿡ե̾ "+" ǽäƤ硢
̾ǻϤޤǤդΥ󥿡ե̾˥ޥå롣
Υץ󤬾ά줿硢
ǤդΥ󥿡ե̾˥ޥå롣
.TP
.BR "-o, --out-interface " "[!] \fIname\fP"
.RB ( FORWARD ,
.B OUTPUT
) ѥåȤ륤󥿡ե̾
󥿡ե̾ "!" ֤ȡ
Υ󥿡եȤ̣ˤʤ롣
󥿡ե̾ "+" ǽäƤ硢
̾ǻϤޤǤդΥ󥿡ե̾˥ޥå롣
Υץ󤬾ά줿硢
ǤդΥ󥿡ե̾˥ޥå롣
.TP
.\" (إå˴ŤΤ) ΤȤݡȤƤʤ
.\" 
.\" .B "[!] " "-f, --fragment"
.\" Υץϡʬ䤵줿ѥå (fragmented packet) Τ
.\" 2 ܰʹߤΥѥåȤ򻲾Ȥ롼Ǥ뤳Ȥ̣Ƥ롣
.\" Τ褦ʥѥå (ޤ ICMP פΥѥå) 
.\" ݡȤΤˡʤΤǡ
.\" ꤹ褦ʥ롼ˤϥޥåʤ
.\" "-f" ե饰 "!" ֤ȡ
.\" ʬ䤵줿ѥåȤΤǽΤΤ
.\" ʬ䤵ƤʤѥåȤ˥ޥå롣
.\" .TP
.B "-c, --set-counters " "PKTS BYTES"
ΥץȤȡ
.RB ( insert ,
.BR append ,
.B replace
ˤ) Ԥϥѥåȥ󥿤ȥХȥ󥿤
뤳ȤǤ롣
.SS ¾Υץ
¾˰ʲΥץꤹ뤳ȤǤ:
.TP
.B "-v, --verbose"
ܺ٤ʽϤԤ
list ޥɤκݤˡ󥿡ե̾
(⤷) 롼ΥץTOS ޥɽ롣
ѥåȤȥХȥ󥿤ɽ롣
ź 'K', 'M', 'G' ϡ
줾 1000, 1,000,000, 1,000,000,000 ܤɽ
(ѹ
.B -x
ե饰⸫)
Υץ append, insert, delete, replace ޥɤŬѤȡ
롼ˤĤƤξܺ٤ʾɽ롣
.TP
.B "-n, --numeric"
ͤˤϤԤ
IP ɥ쥹ݡֹͤˤեޥåȤɽ롣
ǥեȤǤϡΥץ (ǽǤ) ξ
ۥ̾ͥåȥ̾ӥ̾ɽ褦Ȥ롣
.TP
.B "-x, --exact"
̩ʿͤɽ롣
ѥåȥ󥿤ȥХȥ󥿤
K (1000 βܤ)M (1000K βܤ)G (1000M βܤ) ǤϤʤ
̩ͤɽ롣
Υץϡ
.B -L
ޥɤȤطʤ
.TP
.B "--line-numbers"
롼ɽݡΥ롼뤬Τɤΰ֤ˤ뤫ɽ
ֹƹԤλϤղä롣
.TP
.B "--modprobe=command"
˥롼ɲäޤݤˡ
(åȤޥå󥰤γĥʤɤ) ɬפʥ⥸塼ɤ뤿˻Ȥ
.B command
ꤹ롣
.SH ޥå󥰤γĥ
ip6tables ϳĥ줿ѥåȥޥå󥰥⥸塼ȤȤǤ롣
Υ⥸塼 2 ˡǥɤ:
⥸塼ϡ
.B -p
ޤ
.B --protocol
ǰۤΤ˻ꤵ뤫
.B -m
ޤ
.B --match
θ˥⥸塼̾³ƻꤵ롣
Υ⥸塼θˤϡ⥸塼˱
¾Τʥޥɥ饤󥪥ץꤹ뤳ȤǤ롣
ʣγĥޥå󥰥⥸塼 1 Ԥǻꤹ뤳ȤǤ롣
ޤ⥸塼ͭΥإפɽ뤿ˤϡ
⥸塼ꤷ
.B -h
ޤ
.B --help
ꤹФ褤

ʲγĥ١ѥå˴ޤޤƤ롣
ʬΤΤϡޥå󥰤ΰ̣դˤ뤿
.B !
ˤȤǤ롣
.SS tcp
γĥ `--protocol tcp' ꤵ˥ɤ졢
ʲΥץ󶡤:
.TP
.BR "--source-port " "[!] \fIport\fP[:\fIport\fP]"
ݡȤޤϥݡϰϤλꡣ
ӥ̾ޤϥݡֹǤ롣
.IR port : port
Ȥǡ2 ĤֹޤϰϤꤹ뤳ȤǤ롣
ǽΥݡȤά硢"0" ꤹ롣
ǸΥݡȤά硢"65535" ꤹ롣
ǸΥݡȤǽΥݡȤ礭硢2 Ĥ촹롣
ե饰
.B --sport
ϡΥץ̾Ǥ롣
.TP
.BR "--destination-port " "[!] \fIport\fP[:\fIport\fP]"
ݡȤޤϥݡϰϤλꡣ
ե饰
.B --dport
ϡΥץ̾Ǥ롣
.TP
.BR "--tcp-flags " "[!] \fImask\fP \fIcomp\fP"
ꤵƤ褦 TCP ե饰ξ˥ޥå롣
 1 ɾե饰ǡޤʬ줿ꥹȤǽ񤫤롣
 2 ꤵƤʤФʤʤե饰ǡ
ޤʬ줿ꥹȤǽ񤫤롣
Ǥե饰
.B "SYN ACK FIN RST URG PSH ALL NONE"
Ǥ롣
äơޥ
.nf
ip6tables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST SYN
.fi
ϡSYN ե饰ꤵ ACK, FIN, RST ե饰ꤵƤʤ
ѥåȤˤΤߥޥå롣
.TP
.B "[!] --syn"
SYN ӥåȤꤵ ACK  RST ӥåȤꥢƤ
TCP ѥåȤˤΤߥޥå롣
Τ褦ʥѥåȤ TCP ³γ׵˻Ȥ롣
㤨С󥿡եäƤ뤳Τ褦ʥѥåȤ֥åС
¦ؤ TCP ³϶ػߤ뤬¦ؤ TCP ³ˤϱƶʤ
 \fB--tcp-flags SYN,RST,ACK SYN\fP 
"--syn"  "!" ե饰֤ȡ
SYN ӥåȤꥢ ACK  FIN ӥåȤꤵƤ
TCP ѥåȤˤΤߥޥå롣
.TP
.BR "--tcp-option " "[!] \fInumber\fP"
TCP ץꤵƤ˥ޥå롣
.SS udp
γĥ `--protocol udp' ꤵ줿˥ɤ졢
ʲΥץ󶡤:
.TP
.BR "--source-port " "[!] \fIport\fP[:\fIport\fP]"
ݡȤޤϥݡϰϤλꡣ
ܺ٤ TCP ĥ
.B --source-port
ץ򻲾Ȥ뤳ȡ
.TP
.BR "--destination-port " "[!] \fIport\fP[:\fIport\fP]"
ݡȤޤϥݡϰϤλꡣ
ܺ٤ TCP ĥ
.B --destination-port
ץ򻲾Ȥ뤳ȡ
.SS ipv6-icmp
γĥ `--protocol ipv6-icmp' 
ޤ `--protocol icmpv6' ꤵ줿˥ɤ졢
ʲΥץ󶡤:
.TP
.BR "--icmpv6-type " "[!] \fItypename\fP"
ͤ IPv6-ICMP סޤϥޥ
.nf
 ip6tables -p ipv6-icmp -h
.fi
ɽ IPv6-ICMP ̾Ǥ롣
.SS mac
.TP
.BR "--mac-source " "[!] \fIaddress\fP"
 MAC ɥ쥹˥ޥå롣
.I address
 XX:XX:XX:XX:XX:XX ȤǤʤФʤʤ
ͥåȥǥХäƤѥåȤǡ
.BR PREROUTING ,
.BR FORWARD ,
.B INPUT
ѥåȤˤ̣ʤդ뤳ȡ
.SS limit
Υ⥸塼ϡȡХĥե륿Ȥ
ñ̻֤¤줿ޥå롣
γĥȤä롼ϡ(`!' ե饰ꤵʤ¤)
¤ãޤǥޥå롣
Υ⥸塼ϡϿ¤
.B LOG
åȤȤ߹碌ƻȤȤǤ롣
ȤС
.TP
.BI "--limit " "rate"
ñ̻֤ʿѥޥåκ͡
ͤǻꤵ졢ź `/second', `/minute',
`/hour', `/day' դ뤳ȤǤ롣
ǥեȤ 3/hour Ǥ롣
.TP
.BI "--limit-burst " "number"
ѥåȤޥåκ:
Υץǻꤷ¤ãʤС
٤Ȥˡοͤˤʤޤ 1 Ĥ䤵롣
ǥեȤ 5 Ǥ롣
.SS multiport
Υ⥸塼ΥݡȤν˥ޥå롣
ݡȤ 15 ĤޤǻǤ롣
Υ⥸塼
.B "-p tcp"
ޤ
.B "-p udp"
Ȥ߹碌ƻȤȤǤʤ
.TP
.BR "--source-ports " "\fIport\fP[,\fIport\fP[,\fIport\fP...]]"
ݡȤꤵ줿ݡȤΤΤ줫ǤХޥå롣
ե饰
.B --sports
ϡΥץ̾Ǥ롣
.TP
.BR "--destination-ports " "\fIport\fP[,\fIport\fP[,\fIport\fP...]]"
ݡȤꤵ줿ݡȤΤΤ줫ǤХޥå롣
ե饰
.B --dports
ϡΥץ̾Ǥ롣
.TP
.BR "--ports " "\fIport\fP[,\fIport\fP[,\fIport\fP...]]"
ݡȤξߤ
ꤵ줿ݡȤΤΤ줫ǤХޥå롣
.SS mark
Υ⥸塼ϥѥåȤ˴ϢŤ줿
netfilter  mark եɤ˥ޥå
(Υեɤϡʲ
.B MARK
åȤꤵ)
.TP
.BR "--mark " "\fIvalue\fP[/\fImask\fP]"
ꤵ줿ʤ mark ͤΥѥåȤ˥ޥå
(mask ꤵȡӤ mask Ȥ (AND) Ȥ)
.SS owner
Υ⥸塼ϡ줿ѥåȤդơ
ѥåԤΤȤΥޥå󥰤Ȥ롣

.B OUTPUT
ΤߤǤͭǤʤ
ޤ(ICMP ping Τ褦) ѥåȤϡ
ͭԤʤΤФ˥ޥåʤ
ϼ¸ŪʤΤȤǤ롣
.TP
.BI "--uid-owner " "userid"
ꤵ줿¸桼 ID Υץˤ
ѥåȤƤ˥ޥå롣
.TP
.BI "--gid-owner " "groupid"
ꤵ줿¸롼 ID Υץˤ
ѥåȤƤ˥ޥå롣
.TP
.BI "--pid-owner " "processid"
ꤵ줿ץ ID Υץˤ
ѥåȤƤ˥ޥå롣
.TP
.BI "--sid-owner " "sessionid"
ꤵ줿å󥰥롼פΥץˤ
ѥåȤƤ˥ޥå롣
.\" .SS state
.\" Υ⥸塼ϡ³ (connection tracking) Ȥ߹碌Ѥȡ
.\" ѥåȤˤĤƤ³׾֤Τ뤳ȤǤ롣
.\" .TP
.\" .BI "--state " "state"
.\" state ϡޥå󥰤ԤΡޤǶڤ줿³֤ΥꥹȤǤ롣
.\" ǽ state ϰʲ̤ꡣ
.\" .BR INVALID :
.\" ΥѥåȤϴΤ³ȴطƤʤ
.\" .BR ESTABLISHED :
.\" ΥѥåȤ³ΥѥåȤȽ
.\" .BR NEW :
.\" ΥѥåȤ³򳫻Ϥ
.\" ³ΥѥåȤǤʤΤȽ
.\" .BR RELATED :
.\" ΥѥåȤ³򳫻ϤƤ뤬
.\" FTP ǡž ICMP 顼Τ褦ˡ¸³˴طƤ롣
.\" .SS unclean
.\" Υ⥸塼ˤϥץ󤬤ʤ
.\" Ǥʤ褦˸ѥåȤ˥ޥå롣
.\" ϼ¸ŪʤΤȤưƤ롣
.\" .SS tos
.\" Υ⥸塼 IP إå (̥ӥåȤޤ) 8 ӥåȤ
.\" Type of Service եɤ˥ޥå
.\" .TP
.\" .BI "--tos " "tos"
.\" ϡޥåԤɸŪ̾ǤͤǤ褤
.\" (̾ΥꥹȤ򸫤ˤ
.\" .br
.\"  iptables -m tos -h
.\" .br
.\" Ȥ)
.SH åȤγĥ
iptables ϳĥåȥ⥸塼ȤȤǤ:
ʲΤΤɸŪʥǥȥӥ塼˴ޤޤƤ롣
.SS LOG
ޥåѥåȤ򥫡ͥ˵Ͽ롣
Υץ󤬥롼Фꤵȡ
Linux ͥϥޥåѥåȤˤĤƤ
(IPv6 ˤʬ IPv6 إåեɤΤ褦) 餫ξ
ͥɽ
(ͥ
.I dmesg
ޤ
.IR syslogd (8)
Ǹ뤳ȤǤ)
ϡλ åȡפǤ롣
ʤ롼θƤϡΥ롼ؤȷ³롣
äơݤѥåȤϿС
ƱޥåȽǴ 2 ĤΥ롼Ѥ
ǽΥ롼 LOG åȤ
Υ롼 DROP (ޤ REJECT) åȤꤹ롣
.TP
.BI "--log-level " "level"
ϿΥ٥ (ͤǻꤹ뤫
(: ̾ǻꤹ) \fIsyslog.conf\fP(5) 򻲾Ȥ뤳)
.TP
.BI "--log-prefix " "prefix"
ꤷץեååդ롣
ץեå 29 ʸޤǤĹǡ
Τʤǥå̤ΤΩġ
.TP
.B --log-tcp-sequence
TCP ֹ˵Ͽ롣
桼ɤ硢ƥδ롣
.TP
.B --log-tcp-options
TCP ѥåȥإåΥץ˵Ͽ롣
.TP
.B --log-ip-options
IPv6 ѥåȥإåΥץ˵Ͽ롣
.SS MARK
ѥåȤ˴ϢŤ줿 netfilter  mark ͤꤹ롣
.B mangle
ơ֥ΤߤͭǤ롣
.TP
.BI "--set-mark " "mark"
.SS REJECT
ޥåѥåȤαȤƥ顼ѥåȤ뤿˻Ȥ롣
顼ѥåȤʤС
.B DROP
ƱǤꡢ
TARGET λ롼θƤλ롣
ΥåȤϡ
.BR INPUT ,
.BR FORWARD ,
.B OUTPUT
ȡΥ󤫤ƤФ
桼ͭǤ롣
ʲΥץϡ֤륨顼ѥåȤ椹롣
.TP
.BI "--reject-with " "type"
type ȤƻǽʤΤ
.nf
.B " icmp6-no-route"
.B " no-route"
.B " icmp6-adm-prohibited"
.B " adm-prohibited"
.B " icmp6-addr-unreachable"
.B " addr-unreach"
.B " icmp6-port-unreachable"
.B " port-unreach"
.fi
ǤꡢŬڤ IPv6-ICMP 顼å֤
(\fBport-unreach\fP ǥեȤǤ)
ˡTCP ץȥˤΤߥޥå롼Фơץ
.B tcp-reset
ȤȤǤ롣
ΥץȤȡTCP RST ѥåȤ֤롣
Ȥ
.I ident
(113/tcp) ˤõ˻ߤΤΩġ
.I ident
ˤõϡƤ (᡼ʤ) ᡼ۥȤ
᡼뤬ˤ˵롣
.\" .SS TOS
.\" IP إå 8 ӥåȤ Type of Service եɤꤹ뤿˻Ȥ롣
.\" .B mangle
.\" ơ֥ΤߤͭǤ롣
.\" .TP
.\" .BI "--set-tos " "tos"
.\" TOS ֹǻꤹ뤳ȤǤ롣
.\" ޤ
.\" .br
.\"  iptables -j TOS -h
.\" .br
.\" ¹Ԥ롢Ѳǽ TOS ̾ΰˤ TOS ̾Ǥ롣
.\" .SS MIRROR
.\" ¸Ūʥǥ󥹥ȥ졼ѤΥåȤǤꡢ
.\" IP إåեɤ촹
.\" ѥåȤΤǤ롣
.\" 
.\" .BR INPUT ,
.\" .BR FORWARD ,
.\" .B PREROUTING
.\" ȡΥ󤫤ƤӽФ
.\" 桼ͭǤ롣
.\" 롼򤹤뤿ᡢѥåȤ
.\" ʤѥåȥե륿󥰥³סNAT 
.\" ƻ\fBʤ\fR 
.\" .SS SNAT
.\" ΥåȤ
.\" .B nat
.\" ơ֥
.\" .B POSTROUTING
.\" ΤߤͭǤ롣
.\" ΥåȤϥѥåȤɥ쥹
.\" (³ΰʹߤΥѥåȤ⽤ʬʤ (mangle))
.\" ˡ롼뤬ɾߤ褦˻ؼ롣
.\" ΥåȤˤϥץ 1 Ĥ:
.\" .TP
.\" .BR "--to-source  " "\fIipaddr\fP[-\fIipaddr\fP][:\fIport\fP-\fIport\fP]"
.\" 1 Ĥο IP ɥ쥹ޤ IP ɥ쥹ϰϤǤ롣
.\" ץȤơݡȤϰϤǤ
.\" (롼뤬
.\" .B "-p tcp"
.\" ޤ
.\" .B "-p udp"
.\" ꤷƤˤΤͭ)
.\" ݡȤϰϤꤵƤʤ硢
.\" 512 ̤ݡȤϡ¾ 512 ̤ΥݡȤ˥ޥåԥ󥰤롣
.\" 512  1023 ޤǤΥݡȤϡ1024 ̤ΥݡȤ˥ޥåԥ󥰤롣
.\" ʳΥݡȤϡ1024 ʾΥݡȤ˥ޥåԥ󥰤롣
.\" ǽǤСݡȤѴϵʤ
.\" .SS DNAT
.\" ΥåȤ
.\" .B nat
.\" ơ֥
.\" .BR PREROUTING ,
.\" .B OUTPUT
.\" 󡢤Υ󤫤ƤӽФ
.\" 桼ΤߤͭǤ롣
.\" ΥåȤϥѥåȤ襢ɥ쥹
.\" (³ΰʹߤΥѥåȤ⽤ʬʤ (mangle))
.\" ˡ롼ˤåߤᤵ롣
.\" ΥåȤˤϥץ 1 Ĥ:
.\" .TP
.\" .BR "--to-destination " "\fIipaddr\fP[-\fIipaddr\fP][:\fIport\fP-\fIport\fP]"
.\" 1 Ĥο IP ɥ쥹ޤ IP ɥ쥹ϰϤǤ롣
.\" ץȤơݡȤϰϤǤ
.\" (롼뤬
.\" .B "-p tcp"
.\" ޤ
.\" .B "-p udp"
.\" ꤷƤˤΤͭ)
.\" ݡȤϰϤꤵƤʤ硢襢ɥ쥹ѹʤ
.\" .SS MASQUERADE
.\" ΥåȤ
.\" .B nat
.\" ơ֥롢ޤ
.\" .B POSTROUTING
.\" ΤߤͭǤ롣
.\" ưŪ IP (륢å) ³ξˤΤ߻Ȥ٤Ǥ롣
.\"  IP ɥ쥹ʤСSNAT åȤȤ٤Ǥ롣
.\" ޥ졼ǥ󥰤ϡѥåȤ륤󥿡ե
.\" IP ɥ쥹ؤΥޥåԥ󥰤ꤹΤƱǤ뤬
.\" 󥿡եߤ³\fI˺\fRȤݤ롣
.\" Υ륢åפǤƱ󥿡եɥ쥹ˤʤǽ㤤
.\" (ΤᡢΩ줿³ϼ) 硢
.\" ư
.\" ΥåȤˤϥץ 1 Ĥ롣
.\" .TP
.\" .BR "--to-ports " "\fIport\fP[-\fIport\fP]"
.\" ΥץϡѤݡȤϰϤꤷ
.\" ǥեȤ
.\" .B SNAT
.\" ݡȤˡ (嵭) ͥ褵롣
.\" 롼뤬
.\" .B "-p tcp"
.\" ޤ
.\" .B "-p udp"
.\" ꤷƤˤΤͭǤ롣
.\" .SS REDIRECT
.\" ΥåȤϡ
.\" .B nat
.\" ơ֥
.\" .B PREROUTING 
.\" ڤ
.\" .B OUTPUT 
.\" 󡢤Ƥ󤫤ƤӽФ
.\" 桼ǤΤͭǤ롣
.\" ΥåȤϥѥåȤ IP ɥ쥹
.\" ޥ󼫿Ȥ IP ɥ쥹Ѵ롣
.\" (줿ѥåȤϡɥ쥹 127.0.0.1 ˥ޥåפ)
.\" ΥåȤˤϥץ 1 Ĥ:
.\" .TP
.\" .BR "--to-ports " "\fIport\fP[-\fIport\fP]"
.\" ΥץϻѤݡȡݡϰϡʣݡȤꤹ롣
.\" Υץ󤬻ꤵʤ硢ݡȤѹʤ
.\" 롼뤬
.\" .B "-p tcp"
.\" ޤ
.\" .B "-p udp"
.\" ꤷƤˤΤͭǤ롣
.SH ֤
ʥ顼åɸ२顼ɽ롣
ǽ硢λɤ 0 Ǥ롣
ʥޥɥ饤ѥ᡼ˤꥨ顼ȯϡ
λ 2 ֤롣
¾Υ顼ξϡλ 1 ֤롣
.SH Х
Х? ХäƲ? ;-)
ȡġsparc64 Ǥϥ󥿡ͤǤʤ
.SH IPCHAINS Ȥθߴ
.B ip6tables
ϡRusty Russell  ipchains ˤ褯Ƥ롣
礭ʰ㤤ϡ
.B INPUT

.B OUTPUT
줾ۥȤäƤѥåȤȡ
ۥȤФѥåȤΤߤĴ٤ʤȤǤ롣
äơƤΥѥåȤ 3 ĤΤ 1 Ĥ̤ʤ
(롼ץХåȥեå㳰ǡINPUT  OUTPUT ξ̤)
 (ipchains Ǥ)
եɤѥåȤ 3 ĤΥƤ̤äƤ
.PP
¾礭ʰ㤤ϡ
.B -i
ϥ󥿡ե
.B -o
ǽϥ󥿡եꤷ
Ȥ
.B FORWARD
ѥåȤФƻǽǤ롣
.\" .PP
.\" NAT Τʷʬ䤵줿
.\" ץγĥ⥸塼ȤȤ
.\" ǥեȤΡ֥ե륿ץơ֥Ѥ硢
.\" .B iptables 
.\" Ͻʥѥåȥե륿Ȥʤ롣
.\" ϡߤ줿 IP ޥ졼ǥ󥰤ȥѥåȥե륿󥰤
.\" ȹ礻ˤ뺮ά롣
.\" äơץ
.\" .br
.\"  -j MASQ
.\" .br
.\"  -M -S
.\" .br
.\"  -M -L
.\" .br
.\" ̤ΤΤȤư롣
ip6tables Ǥϡ¾ˤ⤤Ĥѹ롣
.SH Ϣ
.BR ip6tables-save (8),
.BR ip6tables-restore(8),
.BR iptables (8),
.BR iptables-save (8),
.BR iptables-restore (8).
.P
ѥåȥե륿󥰤ˤĤƤξܺ٤ iptables λˡ
Ƥ packet-filtering-HOWTO
NAT ˤĤƾܺ٤Ƥ NAT-HOWTO
ɸŪۤˤϴޤޤʤĥξܺ٤Ƥ netfilter-extensions-HOWTO
¤ˤĤƾܺ٤Ƥ netfilter-hacking-HOWTO
.br
.B "http://www.netfilter.org/"
򻲾ȤΤȡ
.SH 
Rusty Russell ϡʳ Michael Neuling ̤ iptables 񤤤
.PP
Marc Boucher  Rusty  iptables ΰŪʥѥåιͤ򴫤ơ
ipnatctl ߤᤵ
ơmangle ơ֥롦ͭԥޥå󥰡
mark ǽ񤭡ȤǻȤƤ餷ɤ񤤤
.PP
James Morris  TOS åȤ tos ޥå󥰤񤤤
.PP
Jozsef Kadlecsik  REJECT åȤ񤤤
.PP
Harald Welte  ULOG åȡTTL ޥå󥰤 TTL åȡ
libipulog 񤤤
.PP
Netfilter ϡMarc Boucher, Martin Josefsson, Jozsef Kadlecsik,
James Morris, Harald Welte, Rusty Russell Ǥ롣
.PP
ip6tables  man ڡϡAndras Kis-Szabo ˤäƺ줿
 Herve Eychenne <rv@wallfire.org> ˤäƽ񤫤줿
iptables  man ڡ򸵤ˤƤ롣
.\" .. ơȤƤ⥯ۤȸäƤƤ⤤ʡ
.\" ..  ..
.\" .. ȤƤ⥦åȤ٤Ǥơ㡼ߥ󥰤ǡѥե ..
.\" .. ơߤʸʤ ..