The section about MASQUERADE specifies that it takes a single option, but in reality it takes two: --to-ports and --random. Signed-off-by: Vlad Dogaru <ddvlad@xxxxxxxxxx> --- extensions/libipt_MASQUERADE.man | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/extensions/libipt_MASQUERADE.man b/extensions/libipt_MASQUERADE.man index 8f42993..2dae964 100644 --- a/extensions/libipt_MASQUERADE.man +++ b/extensions/libipt_MASQUERADE.man @@ -10,7 +10,7 @@ effect that connections are .I forgotten when the interface goes down. This is the correct behavior when the next dialup is unlikely to have the same interface address (and hence -any established connections are lost anyway). It takes one option: +any established connections are lost anyway). .TP \fB\-\-to\-ports\fP \fIport\fP[\fB\-\fP\fIport\fP] This specifies a range of source ports to use, overriding the default -- 1.7.4.1 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html