From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: new iptables policy match Date: Thu, 12 Jan 2006 17:31:24 +0100 Message-ID: <43C6845C.1010405@trash.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: netfilter-devel@lists.netfilter.org Return-path: To: Marco Berizzi In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Marco Berizzi wrote: > Ok. Here is my suggestion: > > --tunnel-src addr[/mask] > matches the source end-point address of the SA. Only valid > with --mode tunnel > > --tunnel-dst addr[/mask] > matches the destination end-point address of the SA. Only valid > with --mode tunnel Thanks, I've updated the man-page.