diff options
| author | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | 2010-06-16 12:45:33 +0200 |
|---|---|---|
| committer | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | 2010-06-16 12:45:33 +0200 |
| commit | d40f1628c3717daebc437a398a285e371b5b6f7f (patch) | |
| tree | 2b6a94d9198c9214785e0eef7a1c866e3a3e25c6 /extensions/libxt_SET.man | |
| parent | 4a498502c10e690798aa78eb92e3aed7ce79f4e0 (diff) | |
libxt_set: new revision added
libipt_set renamed to libxt_set and the support for the forthcoming
ipset release added. I have tested backward (IPv4) and forward
compatibility (IPv4/IPv6):
ipset -N test iphash
ipset -A test test-address
iptables -N test-set
iptables -A test-set -j LOG --log-prefix "match "
iptables -A test-set -j DROP
iptables -A OUTPUT -m set --match-set test dst -j test-set
ping test-address
Diffstat (limited to 'extensions/libxt_SET.man')
| -rw-r--r-- | extensions/libxt_SET.man | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/extensions/libxt_SET.man b/extensions/libxt_SET.man new file mode 100644 index 00000000..ea80c2a1 --- /dev/null +++ b/extensions/libxt_SET.man @@ -0,0 +1,18 @@ +This modules adds and/or deletes entries from IP sets which can be defined +by ipset(8). +.TP +\fB\-\-add\-set\fP \fIsetname\fP \fIflag\fP[\fB,\fP\fIflag\fP...] +add the address(es)/port(s) of the packet to the sets +.TP +\fB\-\-del\-set\fP \fIsetname\fP \fIflag\fP[\fB,\fP\fIflag\fP...] +delete the address(es)/port(s) of the packet from the sets +.IP +where flags are +.BR "src" +and/or +.BR "dst" +specifications and there can be no more than six of them. +.PP +Use of -j SET requires that ipset kernel support is provided. As standard +kernels do not ship this currently, the ipset or Xtables-addons package needs +to be installed. |