IP-RULE(8) Linux IP-RULE(8) (NAME) ip-rule - (routing policy database) (SYNOPSIS) ip [ OPTIONS ] rule { COMMAND | help } ip rule [ show [ SELECTOR ]] ip rule { add | del } SELECTOR ACTION ip rule { flush | save | restore } SELECTOR := [ not ] [ from PREFIX ] [ to PREFIX ] [ tos TOS ] [ dscp DSCP[/MASK] ] [ fwmark FWMARK[/MASK] ] [ iif STRING ] [ oif STRING ] [ priority PREFERENCE ] [ l3mdev ] [ uidrange NUMBER-NUMBER ] [ ipproto PROTOCOL ] [ sport [ NUMBER[/MASK] | NUMBER-NUMBER ] ] [ dport [ NUMBER[/MASK] | NUMBER-NUMBER ] ] [ tun_id TUN_ID ] [ flowlabel FLOWLABEL[/MASK] ] ACTION := [ table TABLE_ID ] [ protocol PROTO ] [ nat ADDRESS ] [ realms [SRCREALM/]DSTREALM ] [ goto NUMBER ] SUPPRESSOR SUPPRESSOR := [ suppress_prefixlength NUMBER ] [ suppress_ifgroup GROUP ] TABLE_ID := [ local | main | default | NUMBER ] (DESCRIPTION) ip rule (RPDB) . ( TOS) . : IP (payload) . << >> (policy routing) . (longest match) << >> (routing policy database RPDB) . (selector) (action predicate) . RPDB ( PREFERENCE ). { tos fwmark} . . RPDB . RPDB . (nexthop) . RPDB : 1. : 0 : : local ( ). local (broadcast) . 2. : 32766 : : main ( ). main . . 3. : 32767 : : default ( ). default . . . RPDB . . NAT (masquerading) IP . realms. . . RPDB : unicast - . blackhole - (drop) . unreachable - << >> (Network is unreachable) . prohibit - << >> (Communication is administratively prohibited) . nat - IP . ip rule add - ip rule delete - type TYPE () . . from PREFIX . to PREFIX . iif NAME () . (loopback) . (forwarded) (local) . oif NAME () . (bound) . tos TOS dsfield TOS TOS . dscp DSCP[/MASK] DSCP . DSCP ( ) /usr/share/iproute2/rt_dsfield /etc/iproute2/rt_dsfield ( ) . dsfield ip rule . ip rule show DSCP . -N . fwmark MARK fwmark . uidrange NUMBER-NUMBER (uid) . ipproto PROTOCOL IP . sport NUMBER[/MASK] | NUMBER-NUMBER . . dport NUMBER[/MASK] | NUMBER-NUMBER . . priority PREFERENCE . PREFERENCE . . preference order priority . table TABLEID . table lookup . protocol PROTO . zebra RTPROT_ZEBRA . suppress_prefixlength NUMBER NUMBER . suppress_ifgroup GROUP GROUP . realms FROM/TO (Realms) . TO . nat ADDRESS IP ( ). ADDRESS NAT ( NAT) ( ) . (masquerade) . map-to nat . flowlabel FLOWLABEL[/MASK] IPv6 (flow label) . : RPDB . () : ip route flush cache. ip rule flush - . protocol PROTO . ip rule show - . list lst show . ip rule save protocol PROTO . (stdout) ip rule show ip rule restore . ip rule restore (stdin) ip rule save . . . (SEE ALSO) ip(8) (AUTHOR) Michail Litvak . iproute2 20 Dec 2011 IP-RULE(8)