Blame SOURCES/0023-doc-Document-notrack-statement.patch

911625
From f7a31d5c3277b29f104fd8ff48df24c8bc790f19 Mon Sep 17 00:00:00 2001
911625
From: Phil Sutter <psutter@redhat.com>
911625
Date: Wed, 24 Jun 2020 18:46:39 +0200
911625
Subject: [PATCH] doc: Document notrack statement
911625
911625
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1841292
911625
Upstream Status: nftables commit f16fbe76f62dc
911625
911625
commit f16fbe76f62dcb9f7395d1837ad2d056463ba55f
911625
Author: Phil Sutter <phil@nwl.cc>
911625
Date:   Mon Jun 22 15:07:40 2020 +0200
911625
911625
    doc: Document notrack statement
911625
911625
    Merely a stub, but better to mention it explicitly instead of having it
911625
    appear in synproxy examples and letting users guess as to what it does.
911625
911625
    Signed-off-by: Phil Sutter <phil@nwl.cc>
911625
    Reviewed-by: Florian Westphal <fw@strlen.de>
911625
---
911625
 doc/statements.txt | 14 ++++++++++++++
911625
 1 file changed, 14 insertions(+)
911625
911625
diff --git a/doc/statements.txt b/doc/statements.txt
911625
index 3b82436..749533a 100644
911625
--- a/doc/statements.txt
911625
+++ b/doc/statements.txt
911625
@@ -262,6 +262,20 @@ table inet raw {
911625
 ct event set new,related,destroy
911625
 --------------------------------------
911625
 
911625
+NOTRACK STATEMENT
911625
+~~~~~~~~~~~~~~~~~
911625
+The notrack statement allows to disable connection tracking for certain
911625
+packets.
911625
+
911625
+[verse]
911625
+*notrack*
911625
+
911625
+Note that for this statement to be effective, it has to be applied to packets
911625
+before a conntrack lookup happens. Therefore, it needs to sit in a chain with
911625
+either prerouting or output hook and a hook priority of -300 or less.
911625
+
911625
+See SYNPROXY STATEMENT for an example usage.
911625
+
911625
 META STATEMENT
911625
 ~~~~~~~~~~~~~~
911625
 A meta statement sets the value of a meta expression. The existing meta fields
911625
-- 
911625
1.8.3.1
911625