Lines Matching refs:be
93 Address Translation. It can also be used to enhance packet
107 If both are enabled the backend to use can be configured at run-time
128 This option enables security markings to be applied to
153 to be shown in procfs under net/netfilter/nf_conntrack. This
162 provide a notifier chain that can be used by other kernel code
192 to connection tracking entries. It can be used with xtables connlabel
208 tracking code will be able to do state tracking on SCTP connections.
218 tracking code will be able to do state tracking on UDP-Lite
230 on this machine or machines that will be MASQUERADED through this
424 forms of full Network Address Port Translation. This can be
627 The lookup will be delegated to the IPv4 or IPv6 FIB depending
700 The lookup will be delegated to the IPv4 or IPv6 FIB depending
709 The return packet generation will be delegated to the IPv4
741 to be shown in procfs under net/netfilter/nf_flowtable.
785 also be used by other subsystems to change their behavior.
820 This option adds a 'AUDIT' target, which can be used to create
830 This option adds a `CHECKSUM' target, which can be used in the iptables mangle
834 that the checksum would normally be offloaded to hardware and
835 thus should be considered valid.
836 This target can be used to fill in the checksum using iptables
871 normally be used in conjunction with the SECMARK target.
882 connection tracking parameters like events to be delivered and
883 the helper to be used.
927 range. The nfmark can influence the routing method and can also be used
940 The remaining time for expiration can be read via sysfs.
952 This can be used to turn a spare LED into a network activity LED,
1040 rates similar to TC estimators. The `rateest' match can be
1067 address will be different on next dialup).
1080 This option adds a "TEE" target with which a packet can be cloned and
1081 this clone be rerouted to another nexthop.
1096 REDIRECT. It can only be used in the mangle table and is useful
1203 true when the packet must be handled by this cluster node. Thus,
1242 Unlike connmark, more than 32 flag bits may be assigned to a
1291 With this option enabled, you will be able to use the iptables
1425 limit matching allows you to control the rate at which a rule can be
1478 Rules and loading software can be downloaded from
1498 be used during encapsulation.
1573 With this option enabled, you will be able to use the
1591 This option adds a `socket' match, which can be used to match
1593 It can be used in combination with the MARK target and policy