summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSimon Lodal <simonl@parknet.dk>2010-05-10 01:02:21 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2010-05-10 01:02:21 +0200
commitafbac0d462328d798f8612d3e793506c0a135a17 (patch)
tree3ebeb213ba32c270c42cdcf444980c06e74cc6db
parentbed2ba957d545b50c3eae6fb28fc0decadbc0dcb (diff)
libxt_conntrack: document --ctstate UNTRACKED
Signed-off-by: Simon Lodal <simonl@parknet.dk> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
-rw-r--r--extensions/libxt_conntrack.man4
-rw-r--r--extensions/libxt_state.man3
2 files changed, 7 insertions, 0 deletions
diff --git a/extensions/libxt_conntrack.man b/extensions/libxt_conntrack.man
index b3d9e730..ec51ef53 100644
--- a/extensions/libxt_conntrack.man
+++ b/extensions/libxt_conntrack.man
@@ -55,6 +55,10 @@ in both directions,
meaning that the packet is starting a new connection, but is associated with an
existing connection, such as an FTP data transfer, or an ICMP error.
.TP
+\fBUNTRACKED\fR
+meaning that the packet is not tracked at all, which happens if you use
+the NOTRACK target in raw table.
+.TP
\fBSNAT\fR
A virtual state, matching if the original source address differs from the reply
destination.
diff --git a/extensions/libxt_state.man b/extensions/libxt_state.man
index b5e719a4..37d095bc 100644
--- a/extensions/libxt_state.man
+++ b/extensions/libxt_state.man
@@ -19,3 +19,6 @@ directions, and
meaning that the packet is starting a new connection, but is
associated with an existing connection, such as an FTP data transfer,
or an ICMP error.
+.B UNTRACKED
+meaning that the packet is not tracked at all, which happens if you use
+the NOTRACK target in raw table.