[patch] iptables.8 - add UNTRACKED state

[patch] iptables.8 - add UNTRACKED state

[Mart Frauenlob]

[-- Attachment #1: Type: text/plain, Size: 221 bytes --]

Hello,

I hope the diff is useful. It adds the UNTRACKED state to the state and 
conntrack --ctstate descriptions.

diff -cB /usr/local/src/iptables-1.4.5/iptables.8 /tmp/iptables.8 > 
iptables.8.diff

Best regards

Mart

[-- Attachment #2: iptables.8.diff --]
[-- Type: text/plain, Size: 1287 bytes --]

*** /usr/local/src/iptables-1.4.5/iptables.8	2009-10-19 19:50:25.000000000 +0200
--- /tmp/iptables.8	2009-11-27 20:45:08.000000000 +0100
***************
*** 607,614 ****
  .PP
  States for \fB\-\-ctstate\fP:
  .TP
  \fBINVALID\fR
! meaning that the packet is associated with no known connection
  .TP
  \fBNEW\fR
  meaning that the packet has started a new connection, or otherwise associated
--- 607,618 ----
  .PP
  States for \fB\-\-ctstate\fP:
  .TP
+ \fBUNTRACKED\fR
+ meaning that the packet will not to be tracked by connection tracking.
+ This state can be set using the \fBNOTRACK\fP target.
+ .TP
  \fBINVALID\fR
! meaning that the packet is associated with no known connection.
  .TP
  \fBNEW\fR
  meaning that the packet has started a new connection, or otherwise associated
***************
*** 1189,1194 ****
--- 1193,1201 ----
  [\fB!\fP] \fB\-\-state\fP \fIstate\fP
  Where state is a comma separated list of the connection states to
  match.  Possible states are
+ .B UNTRACKED
+ meaning that the packet will not to be tracked by connection tracking.
+ This state can be set using the \fBNOTRACK\fP target.
  .B INVALID
  meaning that the packet could not be identified for some reason which
  includes running out of memory and ICMP errors which don't correspond to any