On Friday 2012-09-07 10:55, pablo@xxxxxxxxxxxxx wrote: >From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> > > --limit-iface-out Match only on the packet's incoming device > >Note that it says "incoming" when it should say "outcoming" Language time! :D "to come" is a movement of an object into the direction of the speaker/viewer, "to go" the movement away from the viewer. Since iptables as a viewer is always at the machine, "outgoing" is the term that is being used. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html