mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-07 10:16:42 +02:00
Document '=' in the SOURCE PORT(S) column of shorewall-tcrules(5)
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
631c1ac843
commit
6ffedae4fb
@ -933,6 +933,13 @@ Normal-Service => 0x00</programlisting>
|
|||||||
<para>An entry in this field requires that the PROTO column specify
|
<para>An entry in this field requires that the PROTO column specify
|
||||||
tcp (6), udp (17), sctp (132) or udplite (136). Use '-' if any of
|
tcp (6), udp (17), sctp (132) or udplite (136). Use '-' if any of
|
||||||
the following fields is supplied.</para>
|
the following fields is supplied.</para>
|
||||||
|
|
||||||
|
<para>Beginning with Shorewall 4.5.15, you may place '=' in this
|
||||||
|
column, provided that the DEST PORT(S) column is non-empty. This
|
||||||
|
causes the rule to match when either the source port or the
|
||||||
|
destination port in a packet matches one of the ports specified in
|
||||||
|
DEST PORTS(S). Use of '=' requires multiport match in your iptables
|
||||||
|
and kernel.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user