summaryrefslogtreecommitdiffstats
path: root/iptables.8.in
diff options
context:
space:
mode:
authorPatrick McHardy <kaber@trash.net>2009-11-24 16:11:46 +0100
committerPatrick McHardy <kaber@trash.net>2009-11-24 16:11:46 +0100
commitb1f40e1d31b900f90fd5641a483788ed9cb91c64 (patch)
tree9a3f24769e026a0ee4cdb3f44565807198402598 /iptables.8.in
parentf294f843473718f8d32745600b9a97c0b799e7c5 (diff)
parent1bd2f0a20596e47c082c2415369a209ed1b329f6 (diff)
Merge branch 'master' of git://dev.medozas.de/iptables
Diffstat (limited to 'iptables.8.in')
-rw-r--r--iptables.8.in8
1 files changed, 5 insertions, 3 deletions
diff --git a/iptables.8.in b/iptables.8.in
index 928f46a9..d29deb2e 100644
--- a/iptables.8.in
+++ b/iptables.8.in
@@ -239,9 +239,11 @@ option is omitted.
.TP
[\fB!\fP] \fB\-s\fP, \fB\-\-source\fP \fIaddress\fP[\fB/\fP\fImask\fP][\fB,\fP\fI...\fP]
Source specification. \fIAddress\fP
-can be either a network name, a hostname (please note that specifying
-any name to be resolved with a remote query such as DNS is a really bad idea),
-a network IP address (with \fB/\fP\fImask\fP), or a plain IP address.
+can be either a network name, a hostname, a network IP address (with
+\fB/\fP\fImask\fP), or a plain IP address. Hostnames will
+be resolved once only, before the rule is submitted to the kernel.
+Please note that specifying any name to be resolved with a remote query such as
+DNS is a really bad idea.
The \fImask\fP
can be either a network mask or a plain number,
specifying the number of 1's at the left side of the network mask.