path: root/extensions/
diff options
authorMark Montague <>2011-04-04 14:54:52 +0200
committerPatrick McHardy <>2011-04-04 14:54:52 +0200
commitdf37d99b0cba63443d4224187f2d5a0c299ad7ad (patch)
treee6ad8ad0c3d1618a1a236af90683242d8cf1841c /extensions/
parentc7948744bf591e0c46b6d19ccfa408cc59e11ef1 (diff)
iptables: documentation for iptables and ip6tables "security" tables
Add documentation for the iptables and ip6tables "security" tables. Based on and kernel source. Signed-off-by: Mark Montague <> Signed-off-by: Patrick McHardy <>
Diffstat (limited to 'extensions/')
1 files changed, 5 insertions, 2 deletions
diff --git a/extensions/ b/extensions/
index a72e7104..2616ab99 100644
--- a/extensions/
+++ b/extensions/
@@ -1,9 +1,12 @@
This module copies security markings from packets to connections
(if unlabeled), and from connections back to packets (also only
if unlabeled). Typically used in conjunction with SECMARK, it is
-only valid in the
+valid in the
+.B security
+table (for backwards compatibility with older kernels, it is also
+valid in the
.B mangle
If the packet has a security marking, copy it to the connection