Document that we (now) allow mac match in FORWARD

diff --git a/iptables.8 b/iptables.8
index 38f14acf52db344648f4028b2fa0fe192bfb9308..2fab58ba0f490e0d0fc1667abe066aab84fee31e 100644 (file)
--- a/iptables.8
+++ b/iptables.8
@@ -382,9 +382,10 @@ ICMP type, or one of the ICMP type names shown by the command
 Match source MAC address.  It must be of the form XX:XX:XX:XX:XX:XX.
 Note that this only makes sense for packets entering the
 .BR PREROUTING ,
+.B FORWARD
 or
 .B INPUT
-chains from an ethernet device.
+chains for packets coming from an ethernet device.
 .SS limit
 This module matches at a limited rate using a token bucket filter: it
 can be used in combination with the LOG target to give limited