Document that we (now) allow mac match in FORWARD

1 files changed, 2 insertions, 1 deletions

diff --git a/iptables.8 b/iptables.8
index 38f14ac..2fab58b 100644
--- a/iptables.8
+++ b/iptables.8
@@ -382,9 +382,10 @@ ICMP type, or one of the ICMP type names shown by the command
 Match source MAC address.  It must be of the form XX:XX:XX:XX:XX:XX.
 Note that this only makes sense for packets entering the
 .BR PREROUTING ,
+.B FORWARD
 or
 .B INPUT
-chains from an ethernet device.
+chains for packets coming from an ethernet device.
 .SS limit
 This module matches at a limited rate using a token bucket filter: it
 can be used in combination with the LOG target to give limited