libxt_conntrack: document --ctstate UNTRACKED

Signed-off-by: Simon Lodal <simonl@parknet.dk>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/extensions/libxt_conntrack.man b/extensions/libxt_conntrack.man
index b3d9e730248f080981ae3c66ea89d4affd58d8c7..ec51ef53a89d73e1f4f6a46d26e7ce2e9f36c8b1 100644 (file)
--- a/extensions/libxt_conntrack.man
+++ b/extensions/libxt_conntrack.man
@@ -55,6 +55,10 @@ in both directions,
 meaning that the packet is starting a new connection, but is associated with an
 existing connection, such as an FTP data transfer, or an ICMP error.
 .TP
+\fBUNTRACKED\fR
+meaning that the packet is not tracked at all, which happens if you use
+the NOTRACK target in raw table.
+.TP
 \fBSNAT\fR
 A virtual state, matching if the original source address differs from the reply
 destination.

diff --git a/extensions/libxt_state.man b/extensions/libxt_state.man
index b5e719a4c10a1b78b6974bc578272f538dec77e4..37d095bce573fb012d6da028f357772a0ff63dd0 100644 (file)
--- a/extensions/libxt_state.man
+++ b/extensions/libxt_state.man
@@ -19,3 +19,6 @@ directions, and
 meaning that the packet is starting a new connection, but is
 associated with an existing connection, such as an FTP data transfer,
 or an ICMP error.
+.B UNTRACKED
+meaning that the packet is not tracked at all, which happens if you use
+the NOTRACK target in raw table.