diff options
| author | Máté Eckl <ecklm94@gmail.com> | 2018-07-03 16:20:10 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2018-07-03 16:22:53 +0200 |
| commit | 6cebd48bfc365b39cb65b6b46cee3f0482408202 (patch) | |
| tree | 1a345a3b1c807edd73873527bc162c2d2146f76c | |
| parent | c0c8b300eb670905e569518442f16f2c7966a51b (diff) | |
doc: Add socket expression to man page
Signed-off-by: Máté Eckl <ecklm94@gmail.com>
| -rw-r--r-- | doc/nft.xml | 56 |
1 files changed, 56 insertions, 0 deletions
diff --git a/doc/nft.xml b/doc/nft.xml index dc93a8c6..ef1b2c4e 100644 --- a/doc/nft.xml +++ b/doc/nft.xml @@ -3016,6 +3016,62 @@ raw prerouting meta secpath exists accept </para> </refsect2> <refsect2> + <title>socket expression</title> + <para> + <cmdsynopsis> + <command>socket</command> + <group choice="req"> + <arg>transparent</arg> + </group> + </cmdsynopsis> + </para> + <para> + Socket expression can be used to search for an existing open TCP/UDP socket + and its attributes that can be associated with a packet. It looks for an + established or non-zero bound listening socket (possibly with a non-local address). + </para> + <para> + <table frame="all"> + <title>Available socket attributes</title> + <tgroup cols='3' align='left' colsep='1' rowsep='1'> + <colspec colname='c1'/> + <colspec colname='c2'/> + <colspec colname='c3'/> + <thead> + <row> + <entry>Name</entry> + <entry>Description</entry> + <entry>Type</entry> + </row> + </thead> + <tbody> + <row> + <entry>transparent</entry> + <entry> + Value of the IP_TRANSPARENT socket option in the found socket. It can be 0 or 1. + </entry> + <entry>boolean (1 bit)</entry> <!-- From the aspect of the user at least. --> + </row> + </tbody> + </tgroup> + </table> + </para> + <para> + <example> + <title>Using socket expression</title> + <programlisting> +# Mark packets that correspond to a transparent socket +table inet x { + chain y { + type filter hook prerouting priority -150; policy accept; + socket transparent 1 mark set 0x00000001 accept + } +} + </programlisting> + </example> + </para> + </refsect2> + <refsect2> <title>fib expressions</title> <para> <cmdsynopsis> |