Description: Additional parameters to this rule as string. A parameter has the syntax: = Parameters are separated by a comma. If more than one value is given for a parameter, values are separated by a |-sign Following paramters are defined based on the different protocols: o icmp: type= (specify ICMP type to filter) code= (specify ICMP code to filter) o tcp: frag= (apply to fragments) flags= (apply to packets with give flags o udp/tcp: state= (apply to packets according current state of connection> o general: mac= (specify source MAC address for this rule)