<!-- include start from firewall/tcp-flags.xml.i --> <node name="tcp"> <properties> <help>TCP flags to match</help> </properties> <children> <node name="flags"> <properties> <help>TCP flags to match</help> </properties> <children> <leafNode name="syn"> <properties> <help>Synchronise flag</help> <valueless/> </properties> </leafNode> <leafNode name="ack"> <properties> <help>Acknowledge flag</help> <valueless/> </properties> </leafNode> <leafNode name="fin"> <properties> <help>Finish flag</help> <valueless/> </properties> </leafNode> <leafNode name="rst"> <properties> <help>Reset flag</help> <valueless/> </properties> </leafNode> <leafNode name="urg"> <properties> <help>Urgent flag</help> <valueless/> </properties> </leafNode> <leafNode name="psh"> <properties> <help>Push flag</help> <valueless/> </properties> </leafNode> <leafNode name="ecn"> <properties> <help>Explicit Congestion Notification flag</help> <valueless/> </properties> </leafNode> <leafNode name="cwr"> <properties> <help>Congestion Window Reduced flag</help> <valueless/> </properties> </leafNode> <node name="not"> <properties> <help>Match flags not set</help> </properties> <children> <leafNode name="syn"> <properties> <help>Synchronise flag</help> <valueless/> </properties> </leafNode> <leafNode name="ack"> <properties> <help>Acknowledge flag</help> <valueless/> </properties> </leafNode> <leafNode name="fin"> <properties> <help>Finish flag</help> <valueless/> </properties> </leafNode> <leafNode name="rst"> <properties> <help>Reset flag</help> <valueless/> </properties> </leafNode> <leafNode name="urg"> <properties> <help>Urgent flag</help> <valueless/> </properties> </leafNode> <leafNode name="psh"> <properties> <help>Push flag</help> <valueless/> </properties> </leafNode> <leafNode name="ecn"> <properties> <help>Explicit Congestion Notification flag</help> <valueless/> </properties> </leafNode> <leafNode name="cwr"> <properties> <help>Congestion Window Reduced flag</help> <valueless/> </properties> </leafNode> </children> </node> </children> </node> <leafNode name="mss"> <properties> <help>Maximum segment size (MSS)</help> <valueHelp> <format>u32:1-16384</format> <description>Maximum segment size</description> </valueHelp> <valueHelp> <format><min>-<max></format> <description>TCP MSS range (use '-' as delimiter)</description> </valueHelp> <constraint> <validator name="numeric" argument="--allow-range --range 1-16384"/> </constraint> </properties> </leafNode> </children> </node> <!-- include end -->