--set-tos, TOS target
--sid-owner, Owner match
--source, Generic matches
--source-port, TCP matches, UDP matches, SCTP matches, Multiport match
--src-range, IP range match
--src-type, Addrtype match
--state, State match
--syn, TCP matches
--tcp-flags, TCP matches
--tcp-option, TCP matches
--to, NETMAP target, SAME target
--to-destination, DNAT target
--to-destination target, DNAT target
--to-ports, MASQUERADE target, REDIRECT target
--to-source, SNAT target
--tos, Tos match
--total-nodes, CLUSTERIP target
--ttl-dec, TTL target
--ttl-eq, Ttl match
--ttl-gt, Ttl match
--ttl-inc, TTL target
--ttl-lt, Ttl match
--ttl-set, TTL target
--uid-owner, Owner match
--ulog-cprange, ULOG target
--ulog-nlgroup, ULOG target
--ulog-prefix, ULOG target
--ulog-qthreshold, ULOG target
--update, Recent match
[ASSURED], TCP connections
[UNREPLIED], TCP connections
A
Accept, IP filtering terms and expressions
ACCEPT target, ACCEPT target, Displacement of rules to different chains, The UDP chain
ACK, TCP headers
Acknowledgment Number, TCP headers
Addrtype match, Addrtype match
--dst-type, Addrtype match
--src-type, Addrtype match
ANYCAST, Addrtype match
BLACKHOLE, Addrtype match
BROADCAST, Addrtype match
LOCAL, Addrtype match
MULTICAST, Addrtype match
NAT, Addrtype match
PROHIBIT, Addrtype match
THROW, Addrtype match
UNICAST, Addrtype match
UNREACHABLE, Addrtype match
UNSPEC, Addrtype match
XRESOLVE, Addrtype match
Advanced routing, TCP/IP destination driven routing
AH/ESP match, AH/ESP match
--ahspi, AH/ESP match
Ahspi match, AH/ESP match
Amanda, Complex protocols and connection tracking
ANYCAST, Addrtype match