From 70ce248447b17d1c2c645e283dcb46ebe442bbb7 Mon Sep 17 00:00:00 2001 From: Patrick McHardy Date: Mon, 14 Apr 2014 08:37:26 +0200 Subject: doc: fix programlisting indentation Since programlistings are used literally, the should not be indented. Signed-off-by: Patrick McHardy --- doc/nftables.xml | 89 ++++++++++++++++++++++++++++---------------------------- 1 file changed, 45 insertions(+), 44 deletions(-) diff --git a/doc/nftables.xml b/doc/nftables.xml index af4f2ca6..dc681805 100644 --- a/doc/nftables.xml +++ b/doc/nftables.xml @@ -198,11 +198,11 @@ vi:ts=4 sw=4 Using symbolic variables - define int_if1 = eth0 - define int_if2 = eth1 - define int_ifs = { $int_if1, $int_if2 } +define int_if1 = eth0 +define int_if2 = eth1 +define int_ifs = { $int_if1, $int_if2 } - filter input iif $int_ifs accept +filter input iif $int_ifs accept @@ -622,18 +622,18 @@ vi:ts=4 sw=4 The <command>describe</command> command - $ nft describe tcp flags - payload expression, datatype tcp_flag (TCP flag) (basetype bitmask, integer), 8 bits +$ nft describe tcp flags +payload expression, datatype tcp_flag (TCP flag) (basetype bitmask, integer), 8 bits - pre-defined symbolic constants: - fin 0x01 - syn 0x02 - rst 0x04 - psh 0x08 - ack 0x10 - urg 0x20 - ecn 0x40 - cwr 0x80 +pre-defined symbolic constants: +fin 0x01 +syn 0x02 +rst 0x04 +psh 0x08 +ack 0x10 +urg 0x20 +ecn 0x40 +cwr 0x80 @@ -761,11 +761,11 @@ vi:ts=4 sw=4 String specification - # Interface name - filter input iifname eth0 +# Interface name +filter input iifname eth0 - # Weird interface name - filter input iifname "(eth0)" +# Weird interface name +filter input iifname "(eth0)" @@ -805,8 +805,8 @@ vi:ts=4 sw=4 Link layer address specification - # Ethernet destination MAC address - filter input ether daddr 20:c9:d0:43:12:d9 +# Ethernet destination MAC address +filter input ether daddr 20:c9:d0:43:12:d9 @@ -847,11 +847,11 @@ vi:ts=4 sw=4 IPv4 address specification - # dotted decimal notation - filter output ip daddr 127.0.0.1 +# dotted decimal notation +filter output ip daddr 127.0.0.1 - # host name - filter output ip daddr localhost +# host name +filter output ip daddr localhost @@ -890,8 +890,8 @@ vi:ts=4 sw=4 IPv6 address specification - # abbreviated loopback address - filter output ip6 daddr ::1 +# abbreviated loopback address +filter output ip6 daddr ::1 @@ -1087,11 +1087,11 @@ vi:ts=4 sw=4 Using meta expressions - # qualified meta expression - filter output meta oif eth0 +# qualified meta expression +filter output meta oif eth0 - # unqualified meta expression - filter output oif eth0 +# unqualified meta expression +filter output oif eth0 @@ -2033,10 +2033,11 @@ vi:ts=4 sw=4 Verdict statements - # process packets from eth0 and the internal network in from_lan - # chain, drop all packets from eth0 with different source addresses. - filter input iif eth0 ip saddr 192.168.0.0/24 jump from_lan - filter input iif eth0 drop +# process packets from eth0 and the internal network in from_lan +# chain, drop all packets from eth0 with different source addresses. + +filter input iif eth0 ip saddr 192.168.0.0/24 jump from_lan +filter input iif eth0 drop @@ -2094,26 +2095,26 @@ vi:ts=4 sw=4 Error caused by single incorrect expression - <cmdline>:1:19-22: Error: Interface does not exist - filter output oif eth0 - ^^^ +<cmdline>:1:19-22: Error: Interface does not exist +filter output oif eth0 +^^^ Error caused by invalid combination of two expressions - <cmdline>:1:28-36: Error: Right hand side of relational expression (==) must be constant - filter output tcp dport == tcp dport - ~~ ^^^^^^^^^ +<cmdline>:1:28-36: Error: Right hand side of relational expression (==) must be constant +filter output tcp dport == tcp dport +~~ ^^^^^^^^^ Error returned by the kernel - <cmdline>:0:0-23: Error: Could not process rule: Operation not permitted - filter output oif wlan0 - ^^^^^^^^^^^^^^^^^^^^^^^ +<cmdline>:0:0-23: Error: Could not process rule: Operation not permitted +filter output oif wlan0 +^^^^^^^^^^^^^^^^^^^^^^^ -- cgit v1.2.3