|
 |
049c96 |
From 6d3c3c31c6dae72d87bf2e5a0138291cf4b787cd Mon Sep 17 00:00:00 2001
|
|
|
049c96 |
From: Phil Sutter <psutter@redhat.com>
|
|
|
049c96 |
Date: Wed, 30 Mar 2016 16:43:19 +0200
|
|
|
049c96 |
Subject: [PATCH] man: Add a man page for the xt action
|
|
|
049c96 |
|
|
|
049c96 |
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1275426
|
|
|
049c96 |
Upstream Status: iproute2.git commit fa2c34eff1b89
|
|
|
049c96 |
|
|
|
049c96 |
commit fa2c34eff1b89b55b1cdb3c0ed3b29bf8b3d5b40
|
|
|
049c96 |
Author: Phil Sutter <phil@nwl.cc>
|
|
|
049c96 |
Date: Fri Mar 4 13:11:45 2016 +0100
|
|
|
049c96 |
|
|
|
049c96 |
man: Add a man page for the xt action
|
|
|
049c96 |
|
|
|
049c96 |
Cc: Jiri Pirko <jiri@resnulli.us>
|
|
|
049c96 |
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
|
049c96 |
---
|
|
|
049c96 |
man/man8/tc-xt.8 | 42 ++++++++++++++++++++++++++++++++++++++++++
|
|
|
049c96 |
1 file changed, 42 insertions(+)
|
|
|
049c96 |
create mode 100644 man/man8/tc-xt.8
|
|
|
049c96 |
|
|
|
049c96 |
diff --git a/man/man8/tc-xt.8 b/man/man8/tc-xt.8
|
|
|
049c96 |
new file mode 100644
|
|
|
049c96 |
index 0000000..4fd800c
|
|
|
049c96 |
--- /dev/null
|
|
|
049c96 |
+++ b/man/man8/tc-xt.8
|
|
|
049c96 |
@@ -0,0 +1,42 @@
|
|
|
049c96 |
+.TH "iptables action in tc" 8 "3 Mar 2016" "iproute2" "Linux"
|
|
|
049c96 |
+
|
|
|
049c96 |
+.SH NAME
|
|
|
049c96 |
+xt - tc iptables action
|
|
|
049c96 |
+.SH SYNOPSIS
|
|
|
049c96 |
+.in +8
|
|
|
049c96 |
+.ti -8
|
|
|
049c96 |
+.BR tc " ... " "action xt \-j"
|
|
|
049c96 |
+.IR TARGET " [ " TARGET_OPTS " ]"
|
|
|
049c96 |
+.SH DESCRIPTION
|
|
|
049c96 |
+The
|
|
|
049c96 |
+.B xt
|
|
|
049c96 |
+action allows to call arbitrary iptables targets for packets matching the filter
|
|
|
049c96 |
+this action is attached to.
|
|
|
049c96 |
+.SH OPTIONS
|
|
|
049c96 |
+.TP
|
|
|
049c96 |
+.BI -j " TARGET \fR[\fI TARGET_OPTS \fR]"
|
|
|
049c96 |
+Perform a jump to the given iptables target, optionally passing any target
|
|
|
049c96 |
+specific options in
|
|
|
049c96 |
+.IR TARGET_OPTS .
|
|
|
049c96 |
+.SH EXAMPLES
|
|
|
049c96 |
+The following will attach a
|
|
|
049c96 |
+.B u32
|
|
|
049c96 |
+filter to the
|
|
|
049c96 |
+.B ingress
|
|
|
049c96 |
+qdisc matching ICMP replies and using the
|
|
|
049c96 |
+.B xt
|
|
|
049c96 |
+action to make the kernel yell 'PONG' each time:
|
|
|
049c96 |
+
|
|
|
049c96 |
+.RS
|
|
|
049c96 |
+.EX
|
|
|
049c96 |
+tc qdisc add dev eth0 ingress
|
|
|
049c96 |
+tc filter add dev eth0 parent ffff: proto ip u32 \\
|
|
|
049c96 |
+ match ip protocol 1 0xff \\
|
|
|
049c96 |
+ match ip icmp_type 0 0xff \\
|
|
|
049c96 |
+ action xt -j LOG --log-prefix PONG
|
|
|
049c96 |
+.EE
|
|
|
049c96 |
+.RE
|
|
|
049c96 |
+.SH SEE ALSO
|
|
|
049c96 |
+.BR tc (8),
|
|
|
049c96 |
+.BR tc-u32 (8),
|
|
|
049c96 |
+.BR iptables-extensions (8)
|
|
|
049c96 |
--
|
|
|
049c96 |
1.8.3.1
|
|
|
049c96 |
|