add iptables 'helper' match manpage section (Herve Eychenne)

diff --git a/extensions/libipt_helper.c b/extensions/libipt_helper.c
index 8c59e2a66ccbe62dc634559da46c9b39a8b30688..4b16e0210dc3f3517c4452b896b652ce111bf6ff 100644 (file)
--- a/extensions/libipt_helper.c
+++ b/extensions/libipt_helper.c
@@ -14,7 +14,7 @@ help(void)
 {
        printf(
 "helper match v%s options:\n"
-"[!] --helper value         Match helper value\n"
+"[!] --helper string        Match helper identified by string\n"
 "\n",
 IPTABLES_VERSION);
 }

diff --git a/iptables.8 b/iptables.8
index db9a691b2e2a3a61af20c00eb43883822d3a3f5d..c1039fb042fe9c4c100a03ea8807139bcd2fd093 100644 (file)
--- a/iptables.8
+++ b/iptables.8
@@ -445,6 +445,17 @@ into it's according numeric value.
 This module matches the SPIs in ESP header of IPSec packets.
 .TP
 .BR "--espspi " "[!] \fIspi\fP[:\fIspi\fP]"
+.SS helper
+This module matches packets related to a specific conntrack-helper.
+.TP
+.BI "--helper " "string"
+Matches packets related to the specified conntrack-helper.
+.TP
+string can be "ftp" for packets related to a ftp-session on default port.
+For other ports append -portnr to the value, ie. "ftp-2121".
+.br
+Same rules apply for other conntrack-helpers.
+.br
 .SS icmp
 This extension is loaded if `--protocol icmp' is specified.  It
 provides the following option: