iso/org/dod/internet/private/enterprises/.5504/.4/.1/filter/filterStatementTable/filterStatementEntry/fltStmtAction
fltStmtAction
OBJECT-TYPE
1.3.6.1.4.1.5504.4.1.8.3.1.17
Description
Filter statement action. The bits set in this object specify actions to take on packets matching this statement. Supported actions are: reset(0) : Return a TCP reset packet to the packet sender and drop the packet. This cannot be specified with permit. permit(1) : Stop filtering the packet and allow it to be sent on the associated interface. This cannot be specified with deny. deny(2) : Stop filtering the packet and discard it. This cannot be specified with permit. forward(3) : Forward the packet the IP address specified in fltStmtActionArg. reject(4) : Return an ICMP destination unreachable packet (type 3) to the packet sender with code 13 (communication administratively prohibited). This cannot be specified permit. log(5) : Write the packet to the log stream. There are some mutually exclusive bits: reset(0) and permit(1), permit(1) and deny(2), permit(1) and reject(4). No bits set implies to continue filtering on the packet.
Syntax
BITS { reset(0), permit(1), deny(2), forward(3), reject(4), log(5) }