From 9230c11493abb0622f3df5f1cd6ccacbbf40cef3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Herv=C3=A9=20Eychenne?= Date: Mon, 3 Mar 2003 22:23:22 +0000 Subject: add iptables 'helper' match manpage section (Herve Eychenne) --- iptables.8 | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'iptables.8') diff --git a/iptables.8 b/iptables.8 index db9a691b..c1039fb0 100644 --- a/iptables.8 +++ b/iptables.8 @@ -445,6 +445,17 @@ into it's according numeric value. This module matches the SPIs in ESP header of IPSec packets. .TP .BR "--espspi " "[!] \fIspi\fP[:\fIspi\fP]" +.SS helper +This module matches packets related to a specific conntrack-helper. +.TP +.BI "--helper " "string" +Matches packets related to the specified conntrack-helper. +.TP +string can be "ftp" for packets related to a ftp-session on default port. +For other ports append -portnr to the value, ie. "ftp-2121". +.br +Same rules apply for other conntrack-helpers. +.br .SS icmp This extension is loaded if `--protocol icmp' is specified. It provides the following option: -- cgit v1.2.3