X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=trunk%2Fextensions%2Flibipt_SAME.man;fp=trunk%2Fextensions%2Flibipt_SAME.man;h=7e28ca54e8c0178dc87b92418f5165eda79d60c0;hb=65d1e3fdac47d3d758f6f018457c28d6f3f6306a;hp=0000000000000000000000000000000000000000;hpb=98c90cbcc6f660e13f9e7878bbb80dfc9d03ceae;p=iptables.git

diff --git a/trunk/extensions/libipt_SAME.man b/trunk/extensions/libipt_SAME.man
new file mode 100644
index 0000000..7e28ca5
--- /dev/null
+++ b/trunk/extensions/libipt_SAME.man
@@ -0,0 +1,15 @@
+Similar to SNAT/DNAT depending on chain: it takes a range of addresses
+(`--to 1.2.3.4-1.2.3.7') and gives a client the same
+source-/destination-address for each connection.
+.TP
+\fB--to\fP \fIipaddr\fP[\fB-\fP\fIipaddr\fP]
+Addresses to map source to. May be specified more than once for
+multiple ranges.
+.TP
+.B "--nodst"
+Don't use the destination-ip in the calculations when selecting the
+new source-ip
+.TP
+.B "--random"
+Port mapping will be forcibly randomized to avoid attacks based on 
+port prediction (kernel >= 2.6.21).