forked from extern/shorewall_code
Add MARK column to accounting file doc
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7269 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
46724d7d93
commit
ebd91fcb30
@ -35,9 +35,9 @@
|
||||
</articleinfo>
|
||||
|
||||
<caution>
|
||||
<para><emphasis role="bold">This article applies to Shorewall 3.0 and
|
||||
<para><emphasis role="bold">This article applies to Shorewall 4.0 and
|
||||
later. If you are running a version of Shorewall earlier than Shorewall
|
||||
3.0.0 then please see the documentation for that
|
||||
4.0.0 then please see the documentation for that
|
||||
release</emphasis>.</para>
|
||||
</caution>
|
||||
|
||||
@ -166,6 +166,28 @@
|
||||
Netfilter in kernel version 2.6.14).</member>
|
||||
</simplelist>
|
||||
</listitem>
|
||||
|
||||
<listitem>
|
||||
<para><emphasis role="bold">MARK</emphasis> - Only count packets with
|
||||
particular mark values.<programlisting>[!]<value>[/<mask>][:C]</programlisting>Defines
|
||||
a test on the existing packet or connection mark. The rule will match
|
||||
only if the test returns true.</para>
|
||||
|
||||
<para>If you don’t want to define a test but need to specify anything
|
||||
in the following columns, place a "-" in this field.<simplelist>
|
||||
<member> ! — Inverts the test (not equal)</member>
|
||||
|
||||
<member><value> — Value of the packet or connection
|
||||
mark.</member>
|
||||
|
||||
<member><mask> — A mask to be applied to the mark before
|
||||
testing.</member>
|
||||
|
||||
<member>:C — Designates a connection mark. If omitted, the packet
|
||||
mark’s value is tested. This option is only supported by
|
||||
Shorewall-perl.</member>
|
||||
</simplelist></para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
|
||||
<para>In all columns except ACTION and CHAIN, the values
|
||||
|
Loading…
Reference in New Issue
Block a user