--restore, CONNSECMARK target

--restore-mark, CONNMARK target

--rsource, Recent match

--rttl, Recent match

--save, CONNSECMARK target

--save-mark, CONNMARK target

--seconds, Recent match

--selctx, SECMARK target

--set, Recent match

--set-class, CLASSIFY target

--set-dscp, DSCP target

--set-dscp-class, DSCP target

--set-mark, CONNMARK target, MARK target

--set-mss, TCPMSS target

--set-tos, TOS target

--sid-owner, Owner match

--source, Generic matches

--source-port, TCP matches, UDP matches, SCTP matches, Multiport match

--src-range, IP range match

--src-type, Addrtype match

--state, State match

--syn, TCP matches

--tcp-flags, TCP matches

--tcp-option, TCP matches

--to, NETMAP target, SAME target

--to-destination, DNAT target

--to-destination target, DNAT target

--to-ports, MASQUERADE target, REDIRECT target

--to-source, SNAT target

--tos, Tos match

--total-nodes, CLUSTERIP target

--ttl-dec, TTL target

--ttl-eq, Ttl match

--ttl-gt, Ttl match

--ttl-inc, TTL target

--ttl-lt, Ttl match

--ttl-set, TTL target

--uid-owner, Owner match

--ulog-cprange, ULOG target

--ulog-nlgroup, ULOG target

--ulog-prefix, ULOG target

--ulog-qthreshold, ULOG target

--update, Recent match

[ASSURED], TCP connections

[UNREPLIED], TCP connections

A

Accept, IP filtering terms and expressions

ACCEPT target, ACCEPT target, Displacement of rules to different chains, The UDP chain

ACK, TCP headers

Acknowledgment Number, TCP headers

Addrtype match, Addrtype match

--dst-type, Addrtype match

--src-type, Addrtype match

ANYCAST, Addrtype match