diff options
| -rw-r--r-- | extensions/libip6t_DNPT.man | 2 | ||||
| -rw-r--r-- | extensions/libip6t_SNPT.man | 2 | ||||
| -rw-r--r-- | extensions/libxt_HMARK.man | 2 | ||||
| -rw-r--r-- | extensions/libxt_SET.man | 2 | ||||
| -rw-r--r-- | extensions/libxt_TOS.man | 2 | ||||
| -rw-r--r-- | extensions/libxt_bpf.man | 2 | ||||
| -rw-r--r-- | extensions/libxt_cluster.man | 2 | ||||
| -rw-r--r-- | extensions/libxt_osf.man | 4 | ||||
| -rw-r--r-- | extensions/libxt_set.man | 2 |
9 files changed, 10 insertions, 10 deletions
diff --git a/extensions/libip6t_DNPT.man b/extensions/libip6t_DNPT.man index 61beeee8..9b060f5b 100644 --- a/extensions/libip6t_DNPT.man +++ b/extensions/libip6t_DNPT.man @@ -23,7 +23,7 @@ ip6tables \-t mangle \-I PREROUTING \-i wlan0 \-d 2001:e20:2000:40f::/64 .PP You may need to enable IPv6 neighbor proxy: .IP -sysctl -w net.ipv6.conf.all.proxy_ndp=1 +sysctl \-w net.ipv6.conf.all.proxy_ndp=1 .PP You also have to use the .B NOTRACK diff --git a/extensions/libip6t_SNPT.man b/extensions/libip6t_SNPT.man index 78d644a7..97e0071b 100644 --- a/extensions/libip6t_SNPT.man +++ b/extensions/libip6t_SNPT.man @@ -23,7 +23,7 @@ ip6tables \-t mangle \-I PREROUTING \-i wlan0 \-d 2001:e20:2000:40f::/64 .PP You may need to enable IPv6 neighbor proxy: .IP -sysctl -w net.ipv6.conf.all.proxy_ndp=1 +sysctl \-w net.ipv6.conf.all.proxy_ndp=1 .PP You also have to use the .B NOTRACK diff --git a/extensions/libxt_HMARK.man b/extensions/libxt_HMARK.man index e7b5426d..cd7ffd54 100644 --- a/extensions/libxt_HMARK.man +++ b/extensions/libxt_HMARK.man @@ -56,5 +56,5 @@ iptables \-t mangle \-A PREROUTING \-m conntrack \-\-ctstate NEW \-j HMARK \-\-hmark-tuple ct,src,dst,proto \-\-hmark-offset 10000 \-\-hmark\-mod 10 \-\-hmark\-rnd 0xfeedcafe .PP -iptables \-t mangle \-A PREROUTING -j HMARK \-\-hmark\-offset 10000 +iptables \-t mangle \-A PREROUTING \-j HMARK \-\-hmark\-offset 10000 \-\-hmark-tuple src,dst,proto \-\-hmark-mod 10 \-\-hmark\-rnd 0xdeafbeef diff --git a/extensions/libxt_SET.man b/extensions/libxt_SET.man index 78a9ae0f..c4713378 100644 --- a/extensions/libxt_SET.man +++ b/extensions/libxt_SET.man @@ -42,5 +42,5 @@ and \fB\-\-map\-queue\fP flags can be used in the OUTPUT, FORWARD and POSTROUTING chains. .PP -Use of -j SET requires that ipset kernel support is provided, which, for +Use of \-j SET requires that ipset kernel support is provided, which, for standard kernels, is the case since Linux 2.6.39. diff --git a/extensions/libxt_TOS.man b/extensions/libxt_TOS.man index 58118ec2..de2d22dc 100644 --- a/extensions/libxt_TOS.man +++ b/extensions/libxt_TOS.man @@ -32,5 +32,5 @@ longterm releases 2.6.32 (>=.42), 2.6.33 (>=.15), and 2.6.35 (>=.14), there is a bug whereby IPv6 TOS mangling does not behave as documented and differs from the IPv4 version. The TOS mask indicates the bits one wants to zero out, so it needs to be inverted before applying it to the original TOS field. However, the -aformentioned kernels forgo the inversion which breaks --set-tos and its +aformentioned kernels forgo the inversion which breaks \-\-set\-tos and its mnemonics. diff --git a/extensions/libxt_bpf.man b/extensions/libxt_bpf.man index 1d2aa9e6..d6da2043 100644 --- a/extensions/libxt_bpf.man +++ b/extensions/libxt_bpf.man @@ -17,7 +17,7 @@ iptables \-A OUTPUT \-m bpf \-\-object\-pinned ${BPF_MOUNT}/{PINNED_PATH} \-j AC \fB\-\-bytecode\fP \fIcode\fP Pass the BPF byte code format as generated by the \fBnfbpf_compile\fP utility. .PP -The code format is similar to the output of the tcpdump -ddd command: one line +The code format is similar to the output of the tcpdump \-ddd command: one line that stores the number of instructions, followed by one line for each instruction. Instruction lines follow the pattern 'u16 u8 u8 u32' in decimal notation. Fields encode the operation, jump offset if true, jump offset if diff --git a/extensions/libxt_cluster.man b/extensions/libxt_cluster.man index 94b4b205..23448e26 100644 --- a/extensions/libxt_cluster.man +++ b/extensions/libxt_cluster.man @@ -27,7 +27,7 @@ iptables \-A PREROUTING \-t mangle \-i eth1 \-m cluster iptables \-A PREROUTING \-t mangle \-i eth2 \-m cluster \-\-cluster\-total\-nodes 2 \-\-cluster\-local\-node 1 \-\-cluster\-hash\-seed 0xdeadbeef -\-j MARK -\-set\-mark 0xffff +\-j MARK \-\-set\-mark 0xffff .IP iptables \-A PREROUTING \-t mangle \-i eth1 \-m mark ! \-\-mark 0xffff \-j DROP diff --git a/extensions/libxt_osf.man b/extensions/libxt_osf.man index 5ba92ce0..ecb6ee5f 100644 --- a/extensions/libxt_osf.man +++ b/extensions/libxt_osf.man @@ -35,11 +35,11 @@ Windows [2000:SP3:Windows XP Pro SP1, 2000 SP3]: 11.22.33.55:4024 -> OS fingerprints are loadable using the \fBnfnl_osf\fP program. To load fingerprints from a file, use: .PP -\fBnfnl_osf -f /usr/share/xtables/pf.os\fP +\fBnfnl_osf \-f /usr/share/xtables/pf.os\fP .PP To remove them again, .PP -\fBnfnl_osf -f /usr/share/xtables/pf.os -d\fP +\fBnfnl_osf \-f /usr/share/xtables/pf.os \-d\fP .PP The fingerprint database can be downloaded from http://www.openbsd.org/cgi-bin/cvsweb/src/etc/pf.os . diff --git a/extensions/libxt_set.man b/extensions/libxt_set.man index dbc1586b..5c6f64e3 100644 --- a/extensions/libxt_set.man +++ b/extensions/libxt_set.man @@ -61,5 +61,5 @@ when the set was defined without counter support. The option \fB\-\-match\-set\fP can be replaced by \fB\-\-set\fP if that does not clash with an option of other extensions. .PP -Use of -m set requires that ipset kernel support is provided, which, for +Use of \-m set requires that ipset kernel support is provided, which, for standard kernels, is the case since Linux 2.6.39. |