diff --git a/Shorewall6/manpages/shorewall6-conntrack.xml b/Shorewall6/manpages/shorewall6-conntrack.xml
index 64bd6cf81..707b969df 100644
--- a/Shorewall6/manpages/shorewall6-conntrack.xml
+++ b/Shorewall6/manpages/shorewall6-conntrack.xml
@@ -370,7 +370,7 @@
- SOURCE (format 3) ‒
+ SOURCE (format 3 prior to Shorewall 5.1.0) ‒
{-|interface[:address-list]|address-list}
@@ -388,7 +388,91 @@
- DEST ‒
+ SOURCE (format 3 on Shorewall 5.1.0 and
+ later) -
+ {-|[source-spec[,...]]}
+
+
+ where source-spec is one of the
+ following:
+
+
+
+ interface
+
+
+ Where interface is the logical name of an interface
+ defined in shorewall-interface(5).
+
+
+
+
+ address[,...][exclusion]
+
+
+ where address may be:
+
+
+
+ A host or network IP address.
+
+
+
+ A MAC address in Shorewall format (preceded by a
+ tilde ("~") and using dash ("-") as a separator.
+
+
+
+ The name of an ipset preceded by a plus sign ("+").
+ See shorewall-ipsets(5).
+
+
+
+ exclusion is described in
+ shorewall-exclusion(5).
+
+
+
+
+ interface:address[,...][exclusion]
+
+
+ This form combines the preceding two and requires that
+ both the incoming interace and source address match.
+
+
+
+
+ exclusion
+
+
+ See shorewall-exclusion
+ (5)
+
+
+
+
+ Beginning with Shorewall 5.1.0, multiple
+ source-specs separated by commas may be
+ specified provided that the following alternative forms are
+ used:
+
+
+ (address[,...][exclusion])
+
+ interface:(address[,...][exclusion])
+
+ (exclusion)
+
+
+
+
+
+ DEST (Prior to Shorewall 5.1.0) ‒
{-|interface[:address-list]|address-list}
@@ -400,6 +484,89 @@
+
+ DEST (Shorewall 5.1.0 and later) -
+ {-|dest-spec[,...]}
+
+
+ where dest-spec is one of the
+ following:
+
+
+
+ interface
+
+
+ Where interface is the logical name of an interface
+ defined in shorewall-interface(5).
+
+
+
+
+ address[,...][exclusion]
+
+
+ where address may be:
+
+
+
+ A host or network IP address.
+
+
+
+ A MAC address in Shorewall format (preceded by a
+ tilde ("~") and using dash ("-") as a separator.
+
+
+
+ The name of an ipset preceded by a plus sign ("+").
+ See shorewall-ipsets(5).
+
+
+
+ exclusion is described in
+ shorewall-exclusion(5).
+
+
+
+
+ interface:address[,...][exclusion]
+
+
+ This form combines the preceding two and requires that
+ both the outgoing interace and destination address
+ match.
+
+
+
+
+ exclusion
+
+
+ See shorewall-exclusion
+ (5)
+
+
+
+
+ Beginning with Shorewall 5.1.0, multiple source-specs
+ separated by commas may be specified provided that the following
+ alternative forms are used:
+
+
+ (address[,...][exclusion])
+
+ interface:(address[,...][exclusion])
+
+ (exclusion)
+
+
+
+
PROTO ‒
protocol-name-or-number[,...]