Name of a zone declared in shorewall-zones(5), all or $FW.

If not all or $FW, may optionally be followed by ":" and an IP address, a MAC address, a subnet specification or the name of an interface.

Example: loc:192.168.2.3

MAC addresses must be prefixed with "~" and use "-" as a separator.

Example: ~00-A0-C9-15-39-78

If all, may optionally be followed by ":" and an IP address, a MAC address, a subnet specification or the name of an interface.

Example: all:192.168.2.3

MAC addresses must be prefixed with "~" and use "-" as a separator.

Example: ~00-A0-C9-15-39-78

Name of a zone declared in shorewall-zones(5) or all.

If not all, may optionally be followed by ":" and an IP address or a subnet specification

Example: loc:192.168.2.3

Example: 192.168.2.3

Protocol name or number.

Source port or port range. If all ports, use "-".

Destination port or port range. If all ports, use "-"

Must be one of the following;

        tos-minimize-delay (16)
        tos-maximize-throughput (8)
        tos-maximize-reliability (4)
        tos-minimize-cost (2)
        tos-normal-service (0)

If you don't want to define a test but need to specify anything in the following columns, place a "-" in this field.