From dffb5ec2a8c7f91351e2a1029a757cb1f41f2d02 Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Thu, 21 Feb 2019 15:38:47 +0100 Subject: extensions: AUDIT: Document ineffective --type option Signed-off-by: Phil Sutter Signed-off-by: Florian Westphal --- extensions/libxt_AUDIT.man | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'extensions') diff --git a/extensions/libxt_AUDIT.man b/extensions/libxt_AUDIT.man index cd796967..4f5562e8 100644 --- a/extensions/libxt_AUDIT.man +++ b/extensions/libxt_AUDIT.man @@ -3,12 +3,14 @@ It can be used to record accepted, dropped, and rejected packets. See auditd(8) for additional details. .TP \fB\-\-type\fP {\fBaccept\fP|\fBdrop\fP|\fBreject\fP} -Set type of audit record. +Set type of audit record. Starting with linux-4.12, this option has no effect +on generated audit messages anymore. It is still accepted by iptables for +compatibility reasons, but ignored. .PP Example: .IP iptables \-N AUDIT_DROP .IP -iptables \-A AUDIT_DROP \-j AUDIT \-\-type drop +iptables \-A AUDIT_DROP \-j AUDIT .IP iptables \-A AUDIT_DROP \-j DROP -- cgit v1.2.3