diff --git a/docs/configuration_file_basics.xml b/docs/configuration_file_basics.xml index 04d04086e..5e0678bc8 100644 --- a/docs/configuration_file_basics.xml +++ b/docs/configuration_file_basics.xml @@ -859,6 +859,15 @@ INLINE net $FW ; -m recent --rcheck 10 --hitcount 5 - COMB_IF !70.90.191.120/29 70.90.191.121 ;; -m statistic --mode random --probability 0.50 COMB_IF !70.90.191.120/29 70.90.191.123 + + If the first character of the inline matches is a plus sign + ("+"), then the matches are processed before the column-oriented + input in the rule. That is required when specifying additional TCP + protocol parameters. + + Example from action.TCPFlags: + + DROP - - ;;+ -p 6 --tcp-flags ALL FIN,URG,PSH