From 38ed421276ff0312965c96754b4bc01d0e4f0679 Mon Sep 17 00:00:00 2001 From: Harald Welte Date: Wed, 4 May 2005 07:34:37 +0000 Subject: include FIN bit in mask of "--syn" bits --- extensions/libipt_tcp.man | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'extensions/libipt_tcp.man') diff --git a/extensions/libipt_tcp.man b/extensions/libipt_tcp.man index 48a068fa..e1f44057 100644 --- a/extensions/libipt_tcp.man +++ b/extensions/libipt_tcp.man @@ -32,12 +32,12 @@ will only match packets with the SYN flag set, and the ACK, FIN and RST flags unset. .TP .B "[!] --syn" -Only match TCP packets with the SYN bit set and the ACK and RST bits +Only match TCP packets with the SYN bit set and the ACK,RST and FIN bits cleared. Such packets are used to request TCP connection initiation; for example, blocking such packets coming in an interface will prevent incoming TCP connections, but outgoing TCP connections will be unaffected. -It is equivalent to \fB--tcp-flags SYN,RST,ACK SYN\fP. +It is equivalent to \fB--tcp-flags SYN,RST,ACK,FIN SYN\fP. If the "!" flag precedes the "--syn", the sense of the option is inverted. .TP -- cgit v1.2.3