Description: Additional parameters to this rule as string. A parameter has the syntax: = Parameters are separated by a comma. If more than one value is given for a parameter, values are separated by a |-sign (pipe). Following parameters are defined based on the different protocols: o icmp: type= (specify ICMP type to filter) code= (specify ICMP code to filter) o tcp: flags= (apply to packets with given flags) o general: state= (apply to packets according to current state of connection>) mac= (specify source MAC address for this rule) frag= (apply to fragments)