Line 2 says:
Filter on all source and destination addresses, discard packets that match rule 1, and the offsets stated in rule 1 are relative to the start of the IP packet (as opposed to the start of a TCP packet for example)
Line 3 says:
At offset 09h find the value 06 (packet is of type TCP)
At offset 28h find the value 0000da00 (first four data bytes)
At offset 2dh find the value 00
At offset 2eh find the value cb00 (More data to filter on – need to be more specific since we don’t know packet length this time)
Line 4 is as line 2, but for rule number 2 instead of rule number 1.
Line 5 sets the default filtering action to forward (instead of discard – could stop your network pretty quick!)
Line 6 starts the filter service working
