diff options
Diffstat (limited to 'extensions/libipt_REJECT.man')
| -rw-r--r-- | extensions/libipt_REJECT.man | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/extensions/libipt_REJECT.man b/extensions/libipt_REJECT.man index 174bf7b..ac43d4e 100644 --- a/extensions/libipt_REJECT.man +++ b/extensions/libipt_REJECT.man @@ -21,6 +21,7 @@ The type given can be .B " icmp-net-prohibited" .B " icmp-host-prohibited or" .B " icmp-admin-prohibited (*)" +.B " icmp-frag-needed" .fi which return the appropriate ICMP error message (\fBport-unreachable\fP is the default). The option @@ -31,4 +32,7 @@ TCP RST packet to be sent back. This is mainly useful for blocking (113/tcp) probes which frequently occur when sending mail to broken mail hosts (which won't accept your mail otherwise). .TP +.BI "--pmtu " "size" +The next-hop MTU the icmp-frag-needed is sent back with. +.TP (*) Using icmp-admin-prohibited with kernels that do not support it will result in a plain DROP instead of REJECT |