diff options
author | Jan Engelhardt <jengelh@inai.de> | 2012-09-30 23:34:04 +0200 |
---|---|---|
committer | Jan Engelhardt <jengelh@inai.de> | 2012-09-30 23:38:58 +0200 |
commit | 4c1a015e201c6e5192448cbcf1975dd7630cad82 (patch) | |
tree | 30ee606da82b0cbcb11ebb303196afb29f4e65e7 /extensions/libxt_state.man | |
parent | ec40b897289745da3d67de2cb14be30353003922 (diff) | |
parent | 7b5ba43ae48c1310e5a615cf9485c1d42f486467 (diff) |
Merge branch 'master' of git://git.inai.de/iptables
Conflicts:
extensions/GNUmakefile.in
Resolution: trivial, since this was a fuzz 3.
Reason: Line added from v1.4.15-16-g33710a5 was in vincinity of changes
from v1.4.15-22-g4496801.
Diffstat (limited to 'extensions/libxt_state.man')
-rw-r--r-- | extensions/libxt_state.man | 28 |
1 files changed, 6 insertions, 22 deletions
diff --git a/extensions/libxt_state.man b/extensions/libxt_state.man index 37d095bc..bd60468f 100644 --- a/extensions/libxt_state.man +++ b/extensions/libxt_state.man @@ -1,24 +1,8 @@ -This module, when combined with connection tracking, allows access to -the connection tracking state for this packet. +The "state" module is an obsolete version of "conntrack". +"state" allows access to the connection tracking state for this packet. .TP [\fB!\fP] \fB\-\-state\fP \fIstate\fP -Where state is a comma separated list of the connection states to -match. Possible states are -.B INVALID -meaning that the packet could not be identified for some reason which -includes running out of memory and ICMP errors which don't correspond to any -known connection, -.B ESTABLISHED -meaning that the packet is associated with a connection which has seen -packets in both directions, -.B NEW -meaning that the packet has started a new connection, or otherwise -associated with a connection which has not seen packets in both -directions, and -.B RELATED -meaning that the packet is starting a new connection, but is -associated with an existing connection, such as an FTP data transfer, -or an ICMP error. -.B UNTRACKED -meaning that the packet is not tracked at all, which happens if you use -the NOTRACK target in raw table. +Where state is a comma separated list of the connection states to match. Only a +subset of the states unterstood by "conntrack" are recognized: \fBINVALID\fP, +\fBESTABLISHED\fP, \fBNEW\fP, \fBRELATED\fP or \fBUNTRACKED\fP. For their +description, see the "conntrack" heading in this manpage. |