From 290d76b443bf24999d9caacb3fdd027d6e7112a1 Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Mon, 3 Dec 2018 14:52:28 +0100 Subject: extensions: libipt_realm: Document allowed realm values Older versions of iptables allowed for negative realm values by accident (they would be cast to unsigned). While this was clearly a bug, document the fixed behaviour. Signed-off-by: Phil Sutter Signed-off-by: Pablo Neira Ayuso --- extensions/libipt_realm.man | 2 ++ 1 file changed, 2 insertions(+) (limited to 'extensions/libipt_realm.man') diff --git a/extensions/libipt_realm.man b/extensions/libipt_realm.man index a40b1adc..72dff9b2 100644 --- a/extensions/libipt_realm.man +++ b/extensions/libipt_realm.man @@ -5,3 +5,5 @@ setups involving dynamic routing protocols like BGP. Matches a given realm number (and optionally mask). If not a number, value can be a named realm from /etc/iproute2/rt_realms (mask can not be used in that case). +Both value and mask are four byte unsigned integers and may be specified in +decimal, hex (by prefixing with "0x") or octal (if a leading zero is given). -- cgit v1.2.3