summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPhil Sutter <phil@nwl.cc>2023-08-02 01:55:08 +0200
committerPhil Sutter <phil@nwl.cc>2023-08-05 01:29:49 +0200
commit9458313e017eaa0f8daccff57df24da01f5b6fb8 (patch)
treebe550767beea0d085c62bd4bcab3822d3b3ef800
parentb0092a80656da7cf66f15ce906b17ab040ece12f (diff)
man: iptables-save.8: Clarify 'available tables'
This appears to be confusing. Since a missing table is also not flushed ("restored") when feeding the dump into iptables-restore, such a restore call may be considered incomplete. Signed-off-by: Phil Sutter <phil@nwl.cc>
-rw-r--r--iptables/iptables-save.8.in5
1 files changed, 4 insertions, 1 deletions
diff --git a/iptables/iptables-save.8.in b/iptables/iptables-save.8.in
index 25390771..7f849073 100644
--- a/iptables/iptables-save.8.in
+++ b/iptables/iptables-save.8.in
@@ -52,7 +52,10 @@ restrict output to only one table. If the kernel is configured with automatic
module loading, an attempt will be made to load the appropriate module for
that table if it is not already there.
.br
-If not specified, output includes all available tables.
+If not specified, output includes all available tables. No module loading takes
+place, so in order to include a specific table in the output, the respective
+module (something like \fBiptable_mangle\fP or \fBip6table_raw\fP) must be
+loaded first.
.SH BUGS
None known as of iptables-1.2.1 release
.SH AUTHORS