Merge commit 'origin/trunk@12184' into fedora

[iptables.git] / trunk / extensions / libipt_SAME.man

diff --git a/trunk/extensions/libipt_SAME.man b/trunk/extensions/libipt_SAME.man
new file mode 100644 (file)
index 0000000..7e28ca5
--- /dev/null
+++ b/trunk/extensions/libipt_SAME.man
@@ -0,0 +1,15 @@
+Similar to SNAT/DNAT depending on chain: it takes a range of addresses
+(`--to 1.2.3.4-1.2.3.7') and gives a client the same
+source-/destination-address for each connection.
+.TP
+\fB--to\fP \fIipaddr\fP[\fB-\fP\fIipaddr\fP]
+Addresses to map source to. May be specified more than once for
+multiple ranges.
+.TP
+.B "--nodst"
+Don't use the destination-ip in the calculations when selecting the
+new source-ip
+.TP
+.B "--random"
+Port mapping will be forcibly randomized to avoid attacks based on 
+port prediction (kernel >= 2.6.21).