summaryrefslogtreecommitdiffstats
path: root/extensions/libipt_CONNMARK.man
diff options
context:
space:
mode:
authorlaforge <laforge>2004-02-03 08:19:04 +0000
committerlaforge <laforge>2004-02-03 08:19:04 +0000
commit5b91d339b746219d2d0be374411639156b7794d1 (patch)
tree0651174ba2b0efbb7201f876391c05f94bcb97de /extensions/libipt_CONNMARK.man
parenta3a5ec9354b2da5b8ccb2d2740f7d9d7110ad274 (diff)
latest version of CONNMARK (Henrik Nordstrom)
Diffstat (limited to 'extensions/libipt_CONNMARK.man')
-rw-r--r--extensions/libipt_CONNMARK.man22
1 files changed, 12 insertions, 10 deletions
diff --git a/extensions/libipt_CONNMARK.man b/extensions/libipt_CONNMARK.man
index 64a0222..8b4de5a 100644
--- a/extensions/libipt_CONNMARK.man
+++ b/extensions/libipt_CONNMARK.man
@@ -1,13 +1,15 @@
-This target allows you to mark that connection with an arbitrary walue. This
-value can later be matched via the
-.B connmark
-match.
+This module sets the netfilter mark value associated with a connection
.TP
-.BI "--set-mark " "mark"
-Set the conntrack mark,
+.B --set-mark mark[/mask]
+Set connection mark. If a mask is specified then only those bits set in the
+mask is modified.
.TP
-.BI "--save-mark"
-Save the packet nfmark on the connection mark.
+.B --save-mark [--mask mask]
+Copy the netfilter packet mark value to the connection mark. If a mask
+is specified then only those bits are copied.
.TP
-.BI "--restore-mark"
-Restore the saved nfmark value from the connection mark.
+.B --restore-mark [--mask mask]
+Copy the connection mark value to the packet. If a mask is specified
+then only those bits are copied. This is only valid in the
+.B mangle
+table.