summaryrefslogtreecommitdiffstats
path: root/extensions/libipt_SAME.man
diff options
context:
space:
mode:
authorEric Leblond <eric@inl.fr>2007-02-24 15:11:33 +0000
committerPatrick McHardy <kaber@trash.net>2007-02-24 15:11:33 +0000
commitae4b0b3aa70c67f2eff303a3e75834e45c3794a7 (patch)
tree206f258318c77aefd215255edfc680f39311dc6d /extensions/libipt_SAME.man
parentee9e2205dfd53ffc35495dd60b43c59b77aa3839 (diff)
iptables: add random option to SNAT (Eric Leblond)
Diffstat (limited to 'extensions/libipt_SAME.man')
-rw-r--r--extensions/libipt_SAME.man4
1 files changed, 4 insertions, 0 deletions
diff --git a/extensions/libipt_SAME.man b/extensions/libipt_SAME.man
index 817c2001..4e88d48d 100644
--- a/extensions/libipt_SAME.man
+++ b/extensions/libipt_SAME.man
@@ -9,3 +9,7 @@ multiple ranges.
.B "--nodst"
Don't use the destination-ip in the calculations when selecting the
new source-ip
+.TP
+.B "--random"
+Port mapping will be forcely randomized to avoid attacks based on
+port prediction (kernel >= 2.6.21).