summaryrefslogtreecommitdiffstats
path: root/iptables.8
diff options
context:
space:
mode:
authorRusty Russell <rusty@linuxcare.com.au>2000-05-10 00:18:06 +0000
committerRusty Russell <rusty@rustcorp.com.au>2000-05-10 00:18:06 +0000
commit9cadb4395c1dd72caccbd3f553aa84a5d502af71 (patch)
tree155d8561d2ffe14d2916d32bf6e94830a207a333 /iptables.8
parent40ea1e3aed1282d2f6ccb763759ccc14481d7c74 (diff)
Clarified where things can be (`... or user-defined chains called from...').
Diffstat (limited to 'iptables.8')
-rw-r--r--iptables.88
1 files changed, 5 insertions, 3 deletions
diff --git a/iptables.8 b/iptables.8
index 8aaa69d4..f1724e49 100644
--- a/iptables.8
+++ b/iptables.8
@@ -523,6 +523,7 @@ This target is only valid in the
.B FORWARD
and
.B OUTPUT
+chains, and user-defined chains which are only called from those
chains. Several options control the nature of the error packet
returned:
.TP
@@ -557,7 +558,7 @@ It is only valid in the
.B FORWARD
and
.B OUTPUT
-chains.
+chains, and user-defined chains which are only called from those chains.
.SS SNAT
This target is only valid in the
.B nat
@@ -585,6 +586,7 @@ table, in the
.B PREROUTING
and
.B OUTPUT
+chains, and user-defined chains which are only called from those
chains. It specifies that the destination address of the packet
should be modified (and all future packets in this connection will
also be mangled), and rules should cease being examined. It takes one
@@ -629,10 +631,10 @@ table, in the
.B PREROUTING
and
.B OUTPUT
+chains, and user-defined chains which are only called from those
chains. It alters the destination IP address to send the packet to
the machine itself (locally-generated packets are mapped to the
-127.0.0.1 address).
-It takes one option:
+127.0.0.1 address). It takes one option:
.TP
.BI "--to-ports " "<port>[-<port>]"
This specifies a destination port or range or ports to use: without