1 This module matches packets based on their 2 .B address type. 3 Address types are used within the kernel networking stack and categorize 4 addresses into various groups. The exact definition of that group depends on the specific layer three protocol. 5 .PP 6 The following address types are possible: 7 .TP 8 .BI "UNSPEC" 9 an unspecified address (i.e. 0.0.0.0) 10 .TP 11 .BI "UNICAST" 12 an unicast address 13 .TP 14 .BI "LOCAL" 15 a local address 16 .TP 17 .BI "BROADCAST" 18 a broadcast address 19 .TP 20 .BI "ANYCAST" 21 an anycast packet 22 .TP 23 .BI "MULTICAST" 24 a multicast address 25 .TP 26 .BI "BLACKHOLE" 27 a blackhole address 28 .TP 29 .BI "UNREACHABLE" 30 an unreachable address 31 .TP 32 .BI "PROHIBIT" 33 a prohibited address 34 .TP 35 .BI "THROW" 36 FIXME 37 .TP 38 .BI "NAT" 39 FIXME 40 .TP 41 .BI "XRESOLVE" 42 .TP 43 [\fB!\fP] \fB\-\-src\-type\fP \fItype\fP 44 Matches if the source address is of given type 45 .TP 46 [\fB!\fP] \fB\-\-dst\-type\fP \fItype\fP 47 Matches if the destination address is of given type 48 .TP 49 .BI "\-\-limit\-iface\-in" 50 The address type checking can be limited to the interface the packet is coming 51 in. This option is only valid in the 52 .BR PREROUTING , 53 .B INPUT 54 and 55 .B FORWARD 56 chains. It cannot be specified with the 57 \fB\-\-limit\-iface\-out\fP 58 option. 59 .TP 60 \fB\-\-limit\-iface\-out\fP 61 The address type checking can be limited to the interface the packet is going 62 out. This option is only valid in the 63 .BR POSTROUTING , 64 .B OUTPUT 65 and 66 .B FORWARD 67 chains. It cannot be specified with the 68 \fB\-\-limit\-iface\-in\fP 69 option. 70
