From 7fb46d49aeacda26cc1dca668d7e1fade6b321c6 Mon Sep 17 00:00:00 2001 From: Jozsef Kadlecsik Date: Fri, 29 Jun 2012 21:29:46 +0200 Subject: Explain in more detail src/dst for hash:net,iface --- src/ipset.8 | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'src') diff --git a/src/ipset.8 b/src/ipset.8 index d140f3d..bbad680 100644 --- a/src/ipset.8 +++ b/src/ipset.8 @@ -799,8 +799,9 @@ added/deleted by the most specific prefix which can be found in the set, or by the host prefix value if the set is empty. .PP The second direction parameter of the \fBset\fR match and -\fBSET\fR target modules corresponds to the incoming/outgoing interface -: \fBsrc\fR to the incoming, while \fBdst\fR to the outgoing. When +\fBSET\fR target modules corresponds to the incoming/outgoing interface: +\fBsrc\fR to the incoming one (similar to the \fB\-i\fR flag of iptables), while +\fBdst\fR to the outgoing one (similar to the \fB\-o\fR flag of iptables). When the interface is flagged with \fBphysdev:\fR, the interface is interpreted as the incoming/outgoing bridge port. .PP -- cgit v1.2.3