diff --git a/Shorewall/manpages/shorewall-rules.xml b/Shorewall/manpages/shorewall-rules.xml index 0466f8c6f..ae2275a53 100644 --- a/Shorewall/manpages/shorewall-rules.xml +++ b/Shorewall/manpages/shorewall-rules.xml @@ -476,24 +476,35 @@ - IPTABLES({target + IPTABLES({iptables-target [option ...]) This action allows you to specify an iptables target with options (e.g., 'IPTABLES(MARK --set-xmark 0x01/0xff)'. If - the target is not one recognized by Shorewall, the following - error message will be issued: + the iptables-target is not one + recognized by Shorewall, the following error message will be + issued: ERROR: Unknown target - (target) + (iptables-target) This error message may be eliminated by adding the - target as a builtin action in - iptables-target + as a builtin action in shorewall-actions(5). + + + If you specify REJECT as the + iptables-target, the target of + the rule will be the iptables REJECT target and not + Shorewall's builtin 'reject' chain which is used when REJECT + (see below) is specified as the + target in the ACTION + column. + diff --git a/Shorewall6/manpages/shorewall6-rules.xml b/Shorewall6/manpages/shorewall6-rules.xml index 7254ddfd9..2d8ebca6e 100644 --- a/Shorewall6/manpages/shorewall6-rules.xml +++ b/Shorewall6/manpages/shorewall6-rules.xml @@ -450,24 +450,36 @@ - IP6TABLES({target + IP6TABLES({ip6tables-target [option ...]) - This action allows you to specify an iptables target - with options (e.g., 'IP6TABLES(MARK --set-xmark 0x01/0xff)'. - If the target is not one recognized by Shorewall, the - following error message will be issued: + This action allows you to specify an ip6tables target + with options (e.g., 'IPTABLES(MARK --set-xmark 0x01/0xff)'. If + the ip6tables-target is not one + recognized by Shorewall, the following error message will be + issued: ERROR: Unknown target - (target) + (ip6tables-target) - This error message may be eliminated by adding the - target as a builtin action in - shorewall6-actions(5). + This error message may be eliminated by adding + the + ip6tables-target as a + builtin action in shorewall6-actions(5). + + + If you specify REJECT as the + ip6tables-target, the target of + the rule will be the i6ptables REJECT target and not + Shorewall's builtin 'reject' chain which is used when REJECT + (see below) is specified as the + target in the ACTION + column. +