iptables-1.3.2-20050720

[iptables.git] / extensions / libipt_CONNMARK.man

diff --git a/extensions/libipt_CONNMARK.man b/extensions/libipt_CONNMARK.man
new file mode 100644 (file)
index 0000000..8b4de5a
--- /dev/null
+++ b/extensions/libipt_CONNMARK.man
@@ -0,0 +1,15 @@
+This module sets the netfilter mark value associated with a connection
+.TP
+.B --set-mark mark[/mask]
+Set connection mark. If a mask is specified then only those bits set in the
+mask is modified.
+.TP
+.B --save-mark [--mask mask]
+Copy the netfilter packet mark value to the connection mark. If a mask
+is specified then only those bits are copied.
+.TP
+.B --restore-mark [--mask mask]
+Copy the connection mark value to the packet. If a mask is specified
+then only those bits are copied. This is only valid in the
+.B mangle
+table.