diff options
author | Jan Engelhardt <jengelh@medozas.de> | 2009-01-12 04:53:18 +0100 |
---|---|---|
committer | Patrick McHardy <kaber@trash.net> | 2009-01-12 04:53:18 +0100 |
commit | fea74bf74ff524431ce65145f1523584edf99dc9 (patch) | |
tree | e0ddfbeca93e159dcb0cc7c77df34206fbea26f9 /extensions/libxt_connlimit.man | |
parent | 0c2b5a4aff8ee61529aca8541f7fdae18500470f (diff) |
doc: escape minus sign in manpages
groff formats '-' as a hyphen, and '\-' is needed for a minus.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'extensions/libxt_connlimit.man')
-rw-r--r-- | extensions/libxt_connlimit.man | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/extensions/libxt_connlimit.man b/extensions/libxt_connlimit.man index dd6a155b..eb0832aa 100644 --- a/extensions/libxt_connlimit.man +++ b/extensions/libxt_connlimit.man @@ -1,27 +1,27 @@ Allows you to restrict the number of parallel connections to a server per client IP address (or client address block). .TP -[\fB!\fP] \fB--connlimit-above\fP \fIn\fP +[\fB!\fP] \fB\-\-connlimit\-above\fP \fIn\fP Match if the number of existing connections is (not) above \fIn\fR. .TP -\fB--connlimit-mask\fR \fIprefix_length\fR +\fB\-\-connlimit\-mask\fP \fIprefix_length\fP Group hosts using the prefix length. For IPv4, this must be a number between (including) 0 and 32. For IPv6, between 0 and 128. .P Examples: .TP # allow 2 telnet connections per client host -iptables -A INPUT -p tcp --syn --dport 23 -m connlimit --connlimit-above 2 -j REJECT +iptables \-A INPUT \-p tcp \-\-syn \-\-dport 23 \-m connlimit \-\-connlimit\-above 2 \-j REJECT .TP # you can also match the other way around: -iptables -A INPUT -p tcp --syn --dport 23 -m connlimit ! --connlimit-above 2 -j ACCEPT +iptables \-A INPUT \-p tcp \-\-syn \-\-dport 23 \-m connlimit ! \-\-connlimit\-above 2 \-j ACCEPT .TP # limit the number of parallel HTTP requests to 16 per class C sized \ network (24 bit netmask) -iptables -p tcp --syn --dport 80 -m connlimit --connlimit-above 16 ---connlimit-mask 24 -j REJECT +iptables \-p tcp \-\-syn \-\-dport 80 \-m connlimit \-\-connlimit\-above 16 +\-\-connlimit\-mask 24 \-j REJECT .TP # limit the number of parallel HTTP requests to 16 for the link local network \ (ipv6) -ip6tables -p tcp --syn --dport 80 -s fe80::/64 -m connlimit --connlimit-above -16 --connlimit-mask 64 -j REJECT +ip6tables \-p tcp \-\-syn \-\-dport 80 \-s fe80::/64 \-m connlimit \-\-connlimit\-above +16 \-\-connlimit\-mask 64 \-j REJECT |