summaryrefslogtreecommitdiffstats
path: root/extensions
diff options
context:
space:
mode:
authorLaurence J. Lane <ljlane@debian.org>2013-08-24 17:37:55 -0400
committerFlorian Westphal <fw@strlen.de>2013-08-24 23:48:52 +0200
commitf70e1d675ae70f607e28ea07d8e024ccf283374a (patch)
tree3679b405e87a1d4ecfebd446c97b49b0fbad1851 /extensions
parent8fa26de310ce7b12232329222260afaec825c9df (diff)
iptables: libxt_string.man add examples
Add usage examples for string and hex string patterns. References: http://bugs.debian.org/699904 Signed-off-by: Laurence J. Lane <ljlane@debian.org> Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'extensions')
-rw-r--r--extensions/libxt_string.man10
1 files changed, 10 insertions, 0 deletions
diff --git a/extensions/libxt_string.man b/extensions/libxt_string.man
index b6b271d1..adc9c180 100644
--- a/extensions/libxt_string.man
+++ b/extensions/libxt_string.man
@@ -16,3 +16,13 @@ Matches the given pattern.
.TP
[\fB!\fP] \fB\-\-hex\-string\fP \fIpattern\fP
Matches the given pattern in hex notation.
+.TP
+Examples:
+.IP
+# The string pattern can be used for simple text characters.
+.br
+iptables \-A INPUT \-p tcp \-\-dport 80 \-m string \-\-algo bm \-\-string 'GET /index.html' \-j LOG
+.IP
+# The hex string pattern can be used for non-printable characters, like |0D 0A| or |0D0A|.
+.br
+iptables \-p udp \-\-dport 53 \-m string \-\-algo bm \-\-from 40 \-\-to 57 \-\-hex\-string '|03|www|09|netfilter|03|org|00|'