path: root/iptables/
diff options
authorJan Engelhardt <>2012-12-25 13:11:27 +0000
committerPablo Neira Ayuso <>2013-01-07 02:26:16 +0100
commitdb1414ece88a798ac3f8878875ec3393a917871f (patch)
tree1bbbe9c64ad894b97bc89426850651994896791c /iptables/
parent85346f6e406207f85550f1b7b4f61b22a8e38fbb (diff)
doc: mention -m in the manpage
Signed-off-by: Jan Engelhardt <> Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'iptables/')
1 files changed, 7 insertions, 0 deletions
diff --git a/iptables/ b/iptables/
index d6b409d0..8d657647 100644
--- a/iptables/
+++ b/iptables/
@@ -277,6 +277,13 @@ See the description of the \fB\-s\fP
(source) flag for a detailed description of the syntax. The flag
\fB\-\-dst\fP is an alias for this option.
+\fB\-m\fP, \fB\-\-match\fP \fImatch\fP
+Specifies a match to use, that is, an extension module that tests for a
+specific property. The set of matches make up the condition under which a
+target is invoked. Matches are evaluated first to last as specified on the
+command line and work in short-circuit fashion, i.e. if one extension yields
+false, evaluation will stop.
\fB\-j\fP, \fB\-\-jump\fP \fItarget\fP
This specifies the target of the rule; i.e., what to do if the packet
matches it. The target can be a user-defined chain (other than the