summaryrefslogtreecommitdiffstats
path: root/extensions/libipt_REJECT.man
diff options
context:
space:
mode:
authorJan Engelhardt <jengelh@inai.de>2023-10-24 14:58:06 +0200
committerPhil Sutter <phil@nwl.cc>2023-10-27 18:00:30 +0200
commitb7d45c140fde9366a34412dbd318dd7c84bbef14 (patch)
tree45e43ef8d3fb0503d221a90e4f6bdcac17e53071 /extensions/libipt_REJECT.man
parent458e167e9510f995111d32aa7a30b7c7d2af2e75 (diff)
man: encode minushyphen the way groff/man requires it
Sparked by a recent LWN article[1], sweeps over the iptables manpages for incorrectly encoded dashes was made by Phil Sutter and myself. An ASCII minushyphen in the source manpage translates to a hyphen in output, so one has to use the sequence "\-" to get a minushyphen in the output, as groff_char(7) explains. [1] https://lwn.net/Articles/947941/ (paywalled until about 2023-11-06) Signed-off-by: Jan Engelhardt <jengelh@inai.de> Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions/libipt_REJECT.man')
-rw-r--r--extensions/libipt_REJECT.man7
1 files changed, 4 insertions, 3 deletions
diff --git a/extensions/libipt_REJECT.man b/extensions/libipt_REJECT.man
index cc47aead..a7196cdc 100644
--- a/extensions/libipt_REJECT.man
+++ b/extensions/libipt_REJECT.man
@@ -44,9 +44,10 @@ response for a packet so classed would then terminate the healthy connection.
.PP
So, instead of:
.PP
--A INPUT ... -j REJECT
+\-A INPUT ... \-j REJECT
.PP
do consider using:
.PP
--A INPUT ... -m conntrack --ctstate INVALID -j DROP
--A INPUT ... -j REJECT
+\-A INPUT ... \-m conntrack \-\-ctstate INVALID \-j DROP
+.br
+\-A INPUT ... \-j REJECT