diff options
| author | Jan Engelhardt <jengelh@medozas.de> | 2009-10-05 13:24:02 +0200 |
|---|---|---|
| committer | Harald Welte <laforge@gnumonks.org> | 2009-10-25 10:48:03 +0100 |
| commit | bc57906530df924324efef494a4fcff65d25e4ce (patch) | |
| tree | b506b39993d831d958d6027084e1c890d06d6cfd | |
| parent | 2463f7dcee97efe7dfc4b2e1f6a3c552f23a8d8c (diff) | |
doc: mention maximum mark size in manpages
| -rw-r--r-- | extensions/libxt_CONNMARK.man | 3 | ||||
| -rw-r--r-- | extensions/libxt_MARK.man | 3 | ||||
| -rw-r--r-- | extensions/libxt_SECMARK.man | 2 |
3 files changed, 5 insertions, 3 deletions
diff --git a/extensions/libxt_CONNMARK.man b/extensions/libxt_CONNMARK.man index 571ce370..13c6b4bd 100644 --- a/extensions/libxt_CONNMARK.man +++ b/extensions/libxt_CONNMARK.man @@ -1,4 +1,5 @@ -This module sets the netfilter mark value associated with a connection. +This module sets the netfilter mark value associated with a connection. The +mark is 32 bits wide. .TP \fB\-\-set\-xmark\fP \fIvalue\fP[\fB/\fP\fImask\fP] Zero out the bits given by \fImask\fR and XOR \fIvalue\fR into the ctmark. diff --git a/extensions/libxt_MARK.man b/extensions/libxt_MARK.man index 7bb05bed..98be812b 100644 --- a/extensions/libxt_MARK.man +++ b/extensions/libxt_MARK.man @@ -1,6 +1,7 @@ This target is used to set the Netfilter mark value associated with the packet. The target can only be used in the \fBmangle\fR table. It can, for example, be -used in conjunction with routing based on fwmark (needs iproute2). +used in conjunction with routing based on fwmark (needs iproute2). The mark +field is 32 bits wide. .TP \fB\-\-set\-xmark\fP \fIvalue\fP[\fB/\fP\fImask\fP] Zeroes out the bits given by \fImask\fR and XORs \fIvalue\fR into the packet diff --git a/extensions/libxt_SECMARK.man b/extensions/libxt_SECMARK.man index f58bb432..e44efced 100644 --- a/extensions/libxt_SECMARK.man +++ b/extensions/libxt_SECMARK.man @@ -2,6 +2,6 @@ This is used to set the security mark value associated with the packet for use by security subsystems such as SELinux. It is only valid in the .B mangle -table. +table. The mark is 32 bits wide. .TP \fB\-\-selctx\fP \fIsecurity_context\fP |