summaryrefslogtreecommitdiffstats
path: root/extensions
diff options
context:
space:
mode:
authorPhil Sutter <phil@nwl.cc>2018-12-03 14:52:28 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2018-12-03 15:06:29 +0100
commit290d76b443bf24999d9caacb3fdd027d6e7112a1 (patch)
treeff472cd07b39924b9e1a44b4cb7e874527274881 /extensions
parentccf154d7420c07b6e6febc1c3b8b31d2bd1adbe6 (diff)
extensions: libipt_realm: Document allowed realm values
Older versions of iptables allowed for negative realm values by accident (they would be cast to unsigned). While this was clearly a bug, document the fixed behaviour. Signed-off-by: Phil Sutter <phil@nwl.cc> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'extensions')
-rw-r--r--extensions/libipt_realm.man2
1 files changed, 2 insertions, 0 deletions
diff --git a/extensions/libipt_realm.man b/extensions/libipt_realm.man
index a40b1adc..72dff9b2 100644
--- a/extensions/libipt_realm.man
+++ b/extensions/libipt_realm.man
@@ -5,3 +5,5 @@ setups involving dynamic routing protocols like BGP.
Matches a given realm number (and optionally mask). If not a number, value
can be a named realm from /etc/iproute2/rt_realms (mask can not be used in
that case).
+Both value and mask are four byte unsigned integers and may be specified in
+decimal, hex (by prefixing with "0x") or octal (if a leading zero is given).