diff options
author | Hervé Eychenne <rv@wallfire.org> | 2003-03-03 22:23:22 +0000 |
---|---|---|
committer | Harald Welte <laforge@gnumonks.org> | 2003-03-03 22:23:22 +0000 |
commit | 9230c11493abb0622f3df5f1cd6ccacbbf40cef3 (patch) | |
tree | 25c43da8ca84abcea477c151e848a351fef166cc | |
parent | 63e9063a660809385fd17edb94da044c7c884e02 (diff) |
add iptables 'helper' match manpage section (Herve Eychenne)
-rw-r--r-- | extensions/libipt_helper.c | 2 | ||||
-rw-r--r-- | iptables.8 | 11 |
2 files changed, 12 insertions, 1 deletions
diff --git a/extensions/libipt_helper.c b/extensions/libipt_helper.c index 8c59e2a6..4b16e021 100644 --- a/extensions/libipt_helper.c +++ b/extensions/libipt_helper.c @@ -14,7 +14,7 @@ help(void) { printf( "helper match v%s options:\n" -"[!] --helper value Match helper value\n" +"[!] --helper string Match helper identified by string\n" "\n", IPTABLES_VERSION); } @@ -445,6 +445,17 @@ into it's according numeric value. This module matches the SPIs in ESP header of IPSec packets. .TP .BR "--espspi " "[!] \fIspi\fP[:\fIspi\fP]" +.SS helper +This module matches packets related to a specific conntrack-helper. +.TP +.BI "--helper " "string" +Matches packets related to the specified conntrack-helper. +.TP +string can be "ftp" for packets related to a ftp-session on default port. +For other ports append -portnr to the value, ie. "ftp-2121". +.br +Same rules apply for other conntrack-helpers. +.br .SS icmp This extension is loaded if `--protocol icmp' is specified. It provides the following option: |