Diffstat (limited to 'iptables.8')
1 files changed, 1 insertions, 1 deletions
@@ -411,7 +411,7 @@ will only match packets with the SYN flag set, and the ACK, FIN and
RST flags unset.
.B "[!] --syn"
-Only match TCP packets with the SYN bit set and the ACK and FIN bits
+Only match TCP packets with the SYN bit set and the ACK and RST bits
cleared. Such packets are used to request TCP connection initiation;
for example, blocking such packets coming in an interface will prevent
incoming TCP connections, but outgoing TCP connections will be