diff options
Diffstat (limited to 'extensions/libxt_policy.man')
| -rw-r--r-- | extensions/libxt_policy.man | 26 |
1 files changed, 13 insertions, 13 deletions
diff --git a/extensions/libxt_policy.man b/extensions/libxt_policy.man index 7b7cb2d0..3500025c 100644 --- a/extensions/libxt_policy.man +++ b/extensions/libxt_policy.man @@ -1,6 +1,6 @@ This modules matches the policy used by IPsec for handling a packet. .TP -\fB--dir\fP {\fBin\fP|\fBout\fP} +\fB\-\-dir\fP {\fBin\fP|\fBout\fP} Used to select whether to match the policy used for decapsulation or the policy that will be used for encapsulation. .B in @@ -12,37 +12,37 @@ is valid in the .B POSTROUTING, OUTPUT and FORWARD chains. .TP -\fB--pol\fP {\fBnone\fP|\fBipsec\fP} +\fB\-\-pol\fP {\fBnone\fP|\fBipsec\fP} Matches if the packet is subject to IPsec processing. .TP -.BI "--strict" +\fB\-\-strict\fP Selects whether to match the exact policy or match if any rule of the policy matches the given policy. .TP -[\fB!\fP] \fB--reqid\fP \fIid\fP +[\fB!\fP] \fB\-\-reqid\fP \fIid\fP Matches the reqid of the policy rule. The reqid can be specified with .B setkey(8) using .B unique:id as level. .TP -[\fB!\fP] \fB--spi\fP \fIspi\fP +[\fB!\fP] \fB\-\-spi\fP \fIspi\fP Matches the SPI of the SA. .TP -[\fB!\fP] \fB--proto\fP {\fBah\fP|\fBesp\fP|\fBipcomp\fP} +[\fB!\fP] \fB\-\-proto\fP {\fBah\fP|\fBesp\fP|\fBipcomp\fP} Matches the encapsulation protocol. .TP -[\fB!\fP] \fB--mode\fP {\fBtunnel\fP|\fBtransport\fP} +[\fB!\fP] \fB\-\-mode\fP {\fBtunnel\fP|\fBtransport\fP} Matches the encapsulation mode. .TP -[\fB!\fP] \fB--tunnel-src\fP \fIaddr\fP[\fB/\fP\fImask\fP] +[\fB!\fP] \fB\-\-tunnel\-src\fP \fIaddr\fP[\fB/\fP\fImask\fP] Matches the source end-point address of a tunnel mode SA. -Only valid with \fB--mode tunnel\fP. +Only valid with \fB\-\-mode tunnel\fP. .TP -[\fB!\fP] \fB--tunnel-dst\fP \fIaddr\fP[\fB/\fP\fImask\fP] +[\fB!\fP] \fB\-\-tunnel\-dst\fP \fIaddr\fP[\fB/\fP\fImask\fP] Matches the destination end-point address of a tunnel mode SA. -Only valid with \fB--mode tunnel\fP. +Only valid with \fB\-\-mode tunnel\fP. .TP -.BI "--next" +\fB\-\-next\fP Start the next element in the policy specification. Can only be used with -\fB--strict\fP. +\fB\-\-strict\fP. |