From 12cb442ae1f797499606758ca5416c459cea8baa Mon Sep 17 00:00:00 2001 From: Bart De Schuymer Date: Sun, 24 Oct 2004 07:36:15 +0000 Subject: add wildcard support for interface names --- userspace/ebtables2/ebtables.8 | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) (limited to 'userspace/ebtables2/ebtables.8') diff --git a/userspace/ebtables2/ebtables.8 b/userspace/ebtables2/ebtables.8 index 79014b6..b51e4c6 100644 --- a/userspace/ebtables2/ebtables.8 +++ b/userspace/ebtables2/ebtables.8 @@ -71,7 +71,9 @@ rule matches an Ethernet frame, then a processing specification tells what to do with that matching frame. The processing specification is called a 'target'. However, if the frame does not match the current rule in the chain, then the next rule in the chain is examined and so forth. -The user can create new (user-defined) chains which can be used as the 'target' of a rule. +The user can create new (user-defined) chains which can be used as the 'target' +of a rule. User-defined chains are very useful to get better performance +over the linear traversal of the rules. .SS TARGETS A firewall rule specifies criteria for an Ethernet frame and a frame @@ -430,6 +432,8 @@ The interface via which a frame is received (for the chains). The flag .B --in-if is an alias for this option. +If the interface name ends with '+', then +any interface name that begins with this name will match. .TP .BR "--logical-in " "[!] \fIname\fP" The (logical) bridge interface via which a frame is received (for the @@ -437,6 +441,8 @@ The (logical) bridge interface via which a frame is received (for the .BR FORWARD , .BR PREROUTING " and " BROUTING chains). +If the interface name ends with '+', then +any interface name that begins with this name will match. .TP .BR "-o, --out-interface " "[!] \fIname\fP" The interface via which a frame is going to be sent (for the @@ -447,6 +453,8 @@ and chains). The flag .B --out-if is an alias for this option. +If the interface name ends with '+', then +any interface name that begins with this name will match. .TP .BR "--logical-out " "[!] \fIname\fP" The (logical) bridge interface via which a frame is going to be sent (for @@ -456,6 +464,8 @@ the and .B POSTROUTING chains). +If the interface name ends with '+', then +any interface name that begins with this name will match. .TP .BR "-s, --source " "[!] \fIaddress\fP[/\fImask\fP]" The source mac address. Both mask and address are written as 6 hexadecimal -- cgit v1.2.3