specified in the same way as
.Ar ports .
.It Cm ipversion Ar ver
Matches IP packets whose IP version field is
Matches IPv4 packets whose IP version field is
.Ar ver .
.It Cm keep-state Op Ar :flowname
Upon a match, the firewall will create a dynamic rule, whose