From f699e4c06a26b4977f4a5d220a0c5260b71d6433 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Wed, 24 Mar 2021 17:54:33 +0100 Subject: doc: no need to define a set in ct state ct state are flags, no need to define a set for this. Signed-off-by: Pablo Neira Ayuso --- doc/statements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'doc') diff --git a/doc/statements.txt b/doc/statements.txt index c1fd5e55..6fc0bda0 100644 --- a/doc/statements.txt +++ b/doc/statements.txt @@ -570,7 +570,7 @@ will be out-of-flow packets that were not matched by SYNPROXY. table ip x { chain z { type filter hook input priority filter; policy accept; - ct state { invalid, untracked } synproxy mss 1460 wscale 9 timestamp sack-perm + ct state invalid, untracked synproxy mss 1460 wscale 9 timestamp sack-perm ct state invalid drop } } -- cgit v1.2.3