Manpage update: matches are evaluated in the order they are specified.

Fixes bugzilla id 797.

diff --git a/iptables/iptables-extensions.8.in b/iptables/iptables-extensions.8.in
index e02c81fb676b107d6b5faf919abe8496f8b668e0..9ec3fb0b68c7ffec18aad443854fd2a88439ab45 100644 (file)
--- a/iptables/iptables-extensions.8.in
+++ b/iptables/iptables-extensions.8.in
@@ -15,7 +15,8 @@ extra command line options become available, depending on the specific
 module.  You can specify multiple extended match modules in one line,
 and you can use the \fB\-h\fP or \fB\-\-help\fP
 options after the module has been specified to receive help specific
-to that module.
+to that module.  The extended match modules are evaluated in the order
+they are specified in the rule.
 .PP
 If the \fB\-p\fP or \fB\-\-protocol\fP was specified and if and only if an
 unknown option is encountered, iptables will try load a match module of the