From 332e4acc574e3a348fe611d55bf642de0d50fbda Mon Sep 17 00:00:00 2001 From: Michael Granzow Date: Thu, 9 Apr 2009 18:24:36 +0100 Subject: iptables: accept multiple IP address specifications for -s, -d libiptc already supports adding and deleting multiple rules with different addresses, so it only needs to be wired up to the options. # ip6tables -I INPUT -s 2001:db8::d,2001:db8::e -j DROP References: http://marc.info/?l=netfilter-devel&m=123929790719202&w=2 Adjustments made: syntax, removal of unneeded variables, manpage adjustment, soversion bump. Signed-off-by: Jan Engelhardt --- ip6tables.8.in | 3 +++ 1 file changed, 3 insertions(+) (limited to 'ip6tables.8.in') diff --git a/ip6tables.8.in b/ip6tables.8.in index a31887e8..8037dc7d 100644 --- a/ip6tables.8.in +++ b/ip6tables.8.in @@ -248,6 +248,9 @@ specifying the number of 1's at the left side of the network mask. A "!" argument before the address specification inverts the sense of the address. The flag \fB\-\-src\fP is an alias for this option. +Multiple addresses can be specified, but this will \fBexpand to multiple +rules\fP (when adding with \-A), or will cause multiple rules to be +deleted (with \-D). .TP [\fB!\fP] \fB\-d\fP, \fB\-\-destination\fP \fIaddress\fP[\fB/\fP\fImask\fP] Destination specification. -- cgit v1.2.3