Subject: Re: [PATCHv7 iptables] Interface group match

From: Jarek Poplawski <[email-masked]>
Date: Sat, 01 Dec 2007 22:19:05 +0100

Laszlo Attila Toth wrote, On 11/29/2007 05:11 PM:
...

> Index: extensions/libxt_ifgroup.man
> ===================================================================
> --- extensions/libxt_ifgroup.man	(revision 0)
> +++ extensions/libxt_ifgroup.man	(revision 0)
> @@ -0,0 +1,36 @@
> +Maches packets on an interface if it is in the same interface group

  +Matches packets on an interface if it is in the same interface group

> +as specified by the
> +.B "--ifgroup-in"
> +or
> +.B "--ifgroup-in"

  +.B "--ifgroup-out"

> +parameter. If a mask is also specified, the masked value of
> +the inteface's group must be equal to the given value of the

  +the interface's group must be equal to the given value of the

> +.B "--ifgroup-in"
> +or
> +.B "--ifgroup-out"
> +parameter to match. This match is available in all tables.
> +.TP
> +.BR "[!] --ifgroup-in \fIgroup[/mask]\fR"
> +This specifies the interface group of input interface and the optional mask.
> +Valid only in the in the

  +Valid only in the

> +.B PREROUTING
> +and
> +.B INPUT
> +and
> +.B FORWARD
> +chains, and user-defined chains which are only called from those
> +chains. 
> +.TP
> +.BR "[!] --ifgroup-out \fIgroup[/mask]\fR"
> +This specifies the interface group of out interface and the optional mask.

  +This specifies the interface group of output interface and the optional mask.

> +Valid only in the in the
> +.B FORWARD
> +and
> +.B OUTPUT
> +and
> +.B POSTROUTING
> +chains, and user-defined chains which are only called from those
> +chains. 
> +.RS
> +.PP
> +

Regards,
Jarek P.