doc: mention maximum mark size in manpages

diff --git a/extensions/libxt_CONNMARK.man b/extensions/libxt_CONNMARK.man
index 571ce3700989945cf18df58b674af7ca35cea076..13c6b4bd331f39cface1bd18057d705beb35cf93 100644 (file)
--- a/extensions/libxt_CONNMARK.man
+++ b/extensions/libxt_CONNMARK.man
@@ -1,4 +1,5 @@
-This module sets the netfilter mark value associated with a connection.
+This module sets the netfilter mark value associated with a connection. The
+mark is 32 bits wide.
 .TP
 \fB\-\-set\-xmark\fP \fIvalue\fP[\fB/\fP\fImask\fP]
 Zero out the bits given by \fImask\fR and XOR \fIvalue\fR into the ctmark.

diff --git a/extensions/libxt_MARK.man b/extensions/libxt_MARK.man
index 7bb05bed7d3901f1304823bbe8b23011df0210de..98be812b22a10db695847a0c0fb9be35b46adb12 100644 (file)
--- a/extensions/libxt_MARK.man
+++ b/extensions/libxt_MARK.man
@@ -1,6 +1,7 @@
 This target is used to set the Netfilter mark value associated with the packet.
 The target can only be used in the \fBmangle\fR table. It can, for example, be
-used in conjunction with routing based on fwmark (needs iproute2).
+used in conjunction with routing based on fwmark (needs iproute2). The mark
+field is 32 bits wide.
 .TP
 \fB\-\-set\-xmark\fP \fIvalue\fP[\fB/\fP\fImask\fP]
 Zeroes out the bits given by \fImask\fR and XORs \fIvalue\fR into the packet

diff --git a/extensions/libxt_SECMARK.man b/extensions/libxt_SECMARK.man
index f58bb43287b318e061e314721654654717749ef5..e44efced79b988fb3af0f49ec4c3c08b36a7f68e 100644 (file)
--- a/extensions/libxt_SECMARK.man
+++ b/extensions/libxt_SECMARK.man
@@ -2,6 +2,6 @@ This is used to set the security mark value associated with the
 packet for use by security subsystems such as SELinux.  It is only
 valid in the
 .B mangle
-table.
+table. The mark is 32 bits wide.
 .TP
 \fB\-\-selctx\fP \fIsecurity_context\fP