Rules: Match Criteria


Extended Criteria
ah: IPSec (AH) support
esp: IPSec (ESP) support
icmp
tcp
udp
iplimit and limit: Rate Limiting
mac: MAC (Ethernet Hardware) Address
mark: FW Mark
owner: Socket Owner
state: Stateful Inspection
tcpmss: TCP Maximum Segment Size
and more...