diff options
author | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org </C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org> | 2007-07-16 11:25:27 +0000 |
---|---|---|
committer | /C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org </C=JP/ST=JP/CN=Yasuyuki Kozakai/emailAddress=yasuyuki@netfilter.org> | 2007-07-16 11:25:27 +0000 |
commit | 977343357e926f89bb8b80128f256eba32dc0922 (patch) | |
tree | 57ce6d728ef642bd594ec1b166909a032bc40e89 /extensions | |
parent | 793fdce6a02c5dd801c5226fc692e66d92a073e7 (diff) |
Adds missing explanations about FIN in mask part of '--syn' in libip[6]_tcp.c
and libip6t_tcp.man.
Diffstat (limited to 'extensions')
-rw-r--r-- | extensions/libip6t_tcp.c | 2 | ||||
-rw-r--r-- | extensions/libip6t_tcp.man | 2 | ||||
-rw-r--r-- | extensions/libipt_tcp.c | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/extensions/libip6t_tcp.c b/extensions/libip6t_tcp.c index c2a84e1..8af65ea 100644 --- a/extensions/libip6t_tcp.c +++ b/extensions/libip6t_tcp.c @@ -16,7 +16,7 @@ help(void) " --tcp-flags [!] mask comp match when TCP flags & mask == comp\n" " (Flags: SYN ACK FIN RST URG PSH ALL NONE)\n" "[!] --syn match when only SYN flag set\n" -" (equivalent to --tcp-flags SYN,RST,ACK SYN)\n" +" (equivalent to --tcp-flags SYN,RST,ACK,FIN SYN)\n" " --source-port [!] port[:port]\n" " --sport ...\n" " match source port(s)\n" diff --git a/extensions/libip6t_tcp.man b/extensions/libip6t_tcp.man index 31cc493..41b89a4 100644 --- a/extensions/libip6t_tcp.man +++ b/extensions/libip6t_tcp.man @@ -32,7 +32,7 @@ will only match packets with the SYN flag set, and the ACK, FIN and RST flags unset. .TP .B "[!] --syn" -Only match TCP packets with the SYN bit set and the ACK and RST bits +Only match TCP packets with the SYN bit set and the ACK,RST and FIN bits cleared. Such packets are used to request TCP connection initiation; for example, blocking such packets coming in an interface will prevent incoming TCP connections, but outgoing TCP connections will be diff --git a/extensions/libipt_tcp.c b/extensions/libipt_tcp.c index c712b92..412b6cf 100644 --- a/extensions/libipt_tcp.c +++ b/extensions/libipt_tcp.c @@ -16,7 +16,7 @@ help(void) " --tcp-flags [!] mask comp match when TCP flags & mask == comp\n" " (Flags: SYN ACK FIN RST URG PSH ALL NONE)\n" "[!] --syn match when only SYN flag set\n" -" (equivalent to --tcp-flags SYN,RST,ACK SYN)\n" +" (equivalent to --tcp-flags SYN,RST,ACK,FIN SYN)\n" " --source-port [!] port[:port]\n" " --sport ...\n" " match source port(s)\n" |