On Tue, 15 Mar 2011 19:28:47 -0700 Stephen Hemminger <shemminger@xxxxxxxxxx> wrote: > On Tue, 15 Mar 2011 20:26:20 -0400 > Thomas Graf <tgraf@xxxxxxxxxxxxx> wrote: > > > > > Signed-off-by: Thomas Graf <tgraf@xxxxxxxxxx> > > > > diff --git a/extensions/libxt_AUDIT.man b/extensions/libxt_AUDIT.man > > new file mode 100644 > > index 0000000..cd79696 > > --- /dev/null > > +++ b/extensions/libxt_AUDIT.man > > @@ -0,0 +1,14 @@ > > +This target allows to create audit records for packets hitting the target. > > +It can be used to record accepted, dropped, and rejected packets. See > > +auditd(8) for additional details. > > +.TP > > +\fB\-\-type\fP {\fBaccept\fP|\fBdrop\fP|\fBreject\fP} > > +Set type of audit record. > > +.PP > > +Example: > > +.IP > > +iptables \-N AUDIT_DROP > > +.IP > > +iptables \-A AUDIT_DROP \-j AUDIT \-\-type drop > > +.IP > > +iptables \-A AUDIT_DROP \-j DROP > > -- > > To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in > > the body of a message to majordomo@xxxxxxxxxxxxxxx > > More majordomo info at http://vger.kernel.org/majordomo-info.html > > Applied to net-next Sorry that was to my local copy, not upstream -- -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html