X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=extensions%2Flibip6t_REJECT.man;h=909d8263287b933c0723171c919b71b7e2579dd0;hb=782ed68bce7c9b3cc29eb4351ec13ede40a7ee49;hp=75930f1e939e05271d61aa7c76cc32f491d1d7ca;hpb=2e293f94e43325cb8cc719e27b43e647842c046d;p=iptables.git diff --git a/extensions/libip6t_REJECT.man b/extensions/libip6t_REJECT.man index 75930f1..909d826 100644 --- a/extensions/libip6t_REJECT.man +++ b/extensions/libip6t_REJECT.man @@ -23,7 +23,7 @@ The type given can be .B " icmp6-port-unreachable" .B " port-unreach" .fi -which return the appropriate IPv6-ICMP error message (\fBport-unreach\fP is +which return the appropriate ICMPv6 error message (\fBport-unreach\fP is the default). Finally, the option .B tcp-reset can be used on rules which only match the TCP protocol: this causes a @@ -31,4 +31,6 @@ TCP RST packet to be sent back. This is mainly useful for blocking .I ident (113/tcp) probes which frequently occur when sending mail to broken mail hosts (which won't accept your mail otherwise). +.B tcp-reset +can only be used with kernel versions 2.6.14 or latter.