From: Jan Engelhardt Date: Mon, 5 Oct 2009 11:24:02 +0000 (+0200) Subject: doc: mention maximum mark size in manpages X-Git-Tag: v1.4.6~24 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bc57906530df924324efef494a4fcff65d25e4ce;p=thirdparty%2Fiptables.git doc: mention maximum mark size in manpages --- diff --git a/extensions/libxt_CONNMARK.man b/extensions/libxt_CONNMARK.man index 571ce370..13c6b4bd 100644 --- a/extensions/libxt_CONNMARK.man +++ b/extensions/libxt_CONNMARK.man @@ -1,4 +1,5 @@ -This module sets the netfilter mark value associated with a connection. +This module sets the netfilter mark value associated with a connection. The +mark is 32 bits wide. .TP \fB\-\-set\-xmark\fP \fIvalue\fP[\fB/\fP\fImask\fP] Zero out the bits given by \fImask\fR and XOR \fIvalue\fR into the ctmark. diff --git a/extensions/libxt_MARK.man b/extensions/libxt_MARK.man index 7bb05bed..98be812b 100644 --- a/extensions/libxt_MARK.man +++ b/extensions/libxt_MARK.man @@ -1,6 +1,7 @@ This target is used to set the Netfilter mark value associated with the packet. The target can only be used in the \fBmangle\fR table. It can, for example, be -used in conjunction with routing based on fwmark (needs iproute2). +used in conjunction with routing based on fwmark (needs iproute2). The mark +field is 32 bits wide. .TP \fB\-\-set\-xmark\fP \fIvalue\fP[\fB/\fP\fImask\fP] Zeroes out the bits given by \fImask\fR and XORs \fIvalue\fR into the packet diff --git a/extensions/libxt_SECMARK.man b/extensions/libxt_SECMARK.man index f58bb432..e44efced 100644 --- a/extensions/libxt_SECMARK.man +++ b/extensions/libxt_SECMARK.man @@ -2,6 +2,6 @@ This is used to set the security mark value associated with the packet for use by security subsystems such as SELinux. It is only valid in the .B mangle -table. +table. The mark is 32 bits wide. .TP \fB\-\-selctx\fP \fIsecurity_context\fP