From df37d99b0cba63443d4224187f2d5a0c299ad7ad Mon Sep 17 00:00:00 2001 From: Mark Montague Date: Mon, 4 Apr 2011 14:54:52 +0200 Subject: iptables: documentation for iptables and ip6tables "security" tables Add documentation for the iptables and ip6tables "security" tables. Based on http://lwn.net/Articles/267140/ and kernel source. Signed-off-by: Mark Montague Signed-off-by: Patrick McHardy --- extensions/libxt_CONNSECMARK.man | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'extensions/libxt_CONNSECMARK.man') diff --git a/extensions/libxt_CONNSECMARK.man b/extensions/libxt_CONNSECMARK.man index a72e7104..2616ab99 100644 --- a/extensions/libxt_CONNSECMARK.man +++ b/extensions/libxt_CONNSECMARK.man @@ -1,9 +1,12 @@ This module copies security markings from packets to connections (if unlabeled), and from connections back to packets (also only if unlabeled). Typically used in conjunction with SECMARK, it is -only valid in the +valid in the +.B security +table (for backwards compatibility with older kernels, it is also +valid in the .B mangle -table. +table). .TP \fB\-\-save\fP If the packet has a security marking, copy it to the connection -- cgit v1.2.3