Basic Filtering (cont)

• In the case of TCP and/or UDP:

• object = addr [port-comp | port-range]

• port-comp = "port" compare port-num

• port-range = "port" port-num range port-num

• port-num = number (0-65535) or name (/etc/services)

• compare = "=" | "!=" | "<" | ">" | "<=" | ">=" | "eq" | "ne" | "lt" | "gt" | "le" | "ge"

• range = "<>" | "><"

Notes: