On 2008/12/08 16:55, Jan Engelhardt <jengelh@xxxxxxxxxx> wrote: > The documentation is correct with what iptables outputs: Try "iptables -m tcp --help" (v1.4.1.1): --tcp-flags [!] mask comp match when TCP flags & mask == comp (Flags: SYN ACK FIN RST URG PSH ALL NONE) So manpage and usage text is inconsistent... Max -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html