diff options
author | Henrik Nordstrom <hno@marasystems.com> | 2004-01-22 15:04:24 +0000 |
---|---|---|
committer | Harald Welte <laforge@gnumonks.org> | 2004-01-22 15:04:24 +0000 |
commit | c2794131b445ebccba184066af6d3fb2f38d1f38 (patch) | |
tree | a24f57a9be5a8364b53dfa102705d270f36b440a /extensions/libipt_SNAT.man | |
parent | 0113fe75ff05e09e6f3d251534d9ae32e9aa717c (diff) |
split manpages into per-extension manpage snippet (Henrik Nordstrom)
add lots of missing manpage snippets (Harald Welte)
Diffstat (limited to 'extensions/libipt_SNAT.man')
-rw-r--r-- | extensions/libipt_SNAT.man | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/extensions/libipt_SNAT.man b/extensions/libipt_SNAT.man new file mode 100644 index 00000000..4cc03970 --- /dev/null +++ b/extensions/libipt_SNAT.man @@ -0,0 +1,26 @@ +This target is only valid in the +.B nat +table, in the +.B POSTROUTING +chain. It specifies that the source address of the packet should be +modified (and all future packets in this connection will also be +mangled), and rules should cease being examined. It takes one type +of option: +.TP +.BR "--to-source " "\fIipaddr\fP[-\fIipaddr\fP][:\fIport\fP-\fIport\fP]" +which can specify a single new source IP address, an inclusive range +of IP addresses, and optionally, a port range (which is only valid if +the rule also specifies +.B "-p tcp" +or +.BR "-p udp" ). +If no port range is specified, then source ports below 512 will be +mapped to other ports below 512: those between 512 and 1023 inclusive +will be mapped to ports below 1024, and other ports will be mapped to +1024 or above. Where possible, no port alteration will occur. +.RS +.PP +You can add several --to-source options. If you specify more +than one source address, either via an address range or multiple +--to-source options, a simple round-robin (one after another in +cycle) takes place between these adresses. |