Flow control (cont)

• rule = action direction [options] [tos] [ttl] [proto] [ip] [group]

• group = ["head" nr] ["group" nr]

• default group is 0

• When head rule matches, filtering continues with matching the group members

• The head rule is the default action for the group

• groups can be nested

• 1 head per group. Discussion is still going on about multiple heads

Notes: