From 30dd774eda7d4fa3ca66ec80e55d68f9a9e04e0e Mon Sep 17 00:00:00 2001
From: laforge <laforge>
Date: Mon, 3 Mar 2003 22:23:22 +0000
Subject: add iptables 'helper' match manpage section (Herve Eychenne)

---
 extensions/libipt_helper.c |  2 +-
 iptables.8                 | 11 +++++++++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/extensions/libipt_helper.c b/extensions/libipt_helper.c
index 8c59e2a..4b16e02 100644
--- a/extensions/libipt_helper.c
+++ b/extensions/libipt_helper.c
@@ -14,7 +14,7 @@ help(void)
 {
 	printf(
 "helper match v%s options:\n"
-"[!] --helper value         Match helper value\n"
+"[!] --helper string        Match helper identified by string\n"
 "\n",
 IPTABLES_VERSION);
 }
diff --git a/iptables.8 b/iptables.8
index db9a691..c1039fb 100644
--- a/iptables.8
+++ b/iptables.8
@@ -445,6 +445,17 @@ into it's according numeric value.
 This module matches the SPIs in ESP header of IPSec packets.
 .TP
 .BR "--espspi " "[!] \fIspi\fP[:\fIspi\fP]"
+.SS helper
+This module matches packets related to a specific conntrack-helper.
+.TP
+.BI "--helper " "string"
+Matches packets related to the specified conntrack-helper.
+.TP
+string can be "ftp" for packets related to a ftp-session on default port.
+For other ports append -portnr to the value, ie. "ftp-2121".
+.br
+Same rules apply for other conntrack-helpers.
+.br
 .SS icmp
 This extension is loaded if `--protocol icmp' is specified.  It
 provides the following option:
-- 
cgit v1.2.3