Blame extensions/libxt_CONNSECMARK.man
|
Packit |
7b22a4 |
This module copies security markings from packets to connections
|
|
Packit |
7b22a4 |
(if unlabeled), and from connections back to packets (also only
|
|
Packit |
7b22a4 |
if unlabeled). Typically used in conjunction with SECMARK, it is
|
|
Packit |
7b22a4 |
valid in the
|
|
Packit |
7b22a4 |
.B security
|
|
Packit |
7b22a4 |
table (for backwards compatibility with older kernels, it is also
|
|
Packit |
7b22a4 |
valid in the
|
|
Packit |
7b22a4 |
.B mangle
|
|
Packit |
7b22a4 |
table).
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
\fB\-\-save\fP
|
|
Packit |
7b22a4 |
If the packet has a security marking, copy it to the connection
|
|
Packit |
7b22a4 |
if the connection is not marked.
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
\fB\-\-restore\fP
|
|
Packit |
7b22a4 |
If the packet does not have a security marking, and the connection
|
|
Packit |
7b22a4 |
does, copy the security marking from the connection to the packet.
|
|
Packit |
7b22a4 |
|