Clarify --tunnel-src/--tunnel-dst options

diff --git a/extensions/libip6t_policy.man b/extensions/libip6t_policy.man
index 395dc2c1d4f983292e74096846147023d05edae7..eed163e113dc3dd1d6d8a20725860f7d5c360f4d 100644 (file)
--- a/extensions/libip6t_policy.man
+++ b/extensions/libip6t_policy.man
@@ -35,11 +35,13 @@ Matches the encapsulation protocol.
 .BI "--mode " "tunnel|transport"
 Matches the encapsulation mode.
 .TP
-.BI "--tunnel-src " "addr[/masklen]"
-Matches the source address of a tunnel. Only valid with --mode tunnel.
+.BI "--tunnel-src " "addr[/mask]"
+Matches the source end-point address of a tunnel mode SA.
+Only valid with --mode tunnel.
 .TP
-.BI "--tunnel-dst " "addr[/masklen]"
-Matches the destination address of a tunnel. Only valid with --mode tunnel.
+.BI "--tunnel-dst " "addr[/mask]"
+Matches the destination end-point address of a tunnel mode SA.
+Only valid with --mode tunnel.
 .TP
 .BI "--next"
 Start the next element in the policy specification. Can only be used with

diff --git a/extensions/libipt_policy.man b/extensions/libipt_policy.man
index c2e81bed224d885716bb012f9af70a9d24515568..eed163e113dc3dd1d6d8a20725860f7d5c360f4d 100644 (file)
--- a/extensions/libipt_policy.man
+++ b/extensions/libipt_policy.man
@@ -36,10 +36,12 @@ Matches the encapsulation protocol.
 Matches the encapsulation mode.
 .TP
 .BI "--tunnel-src " "addr[/mask]"
-Matches the source address of a tunnel. Only valid with --mode tunnel.
+Matches the source end-point address of a tunnel mode SA.
+Only valid with --mode tunnel.
 .TP
 .BI "--tunnel-dst " "addr[/mask]"
-Matches the destination address of a tunnel. Only valid with --mode tunnel.
+Matches the destination end-point address of a tunnel mode SA.
+Only valid with --mode tunnel.
 .TP
 .BI "--next"
 Start the next element in the policy specification. Can only be used with