diff options
Diffstat (limited to 'net-firewall/iptables/files/libxt_layer7.man')
| -rw-r--r-- | net-firewall/iptables/files/libxt_layer7.man | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/net-firewall/iptables/files/libxt_layer7.man b/net-firewall/iptables/files/libxt_layer7.man new file mode 100644 index 0000000..83a8c53 --- /dev/null +++ b/net-firewall/iptables/files/libxt_layer7.man @@ -0,0 +1,14 @@ +This module matches packets based on the application layer data of +their connections. It uses regular expression matching to compare +the application layer data to regular expressions found it the layer7 +configuration files. This is an experimental module which can be found at +http://l7-filter.sf.net. It takes two options. +.TP +.BI "--l7proto " "\fIprotocol\fP" +Match the specified protocol. The protocol name must match a file +name in /etc/l7-protocols/ or one of its first-level child directories. +.TP +.BI "--l7dir " "\fIdirectory\fP" +Use \fIdirectory\fP instead of /etc/l7-protocols/. This option must be +specified before --l7proto. + |