Changed the text a bit.
This commit is contained in:
parent
948a220361
commit
53757a09e8
|
@ -1,32 +1,31 @@
|
|||
--- README.libipt ----------------------------------------------------
|
||||
|
||||
|
||||
IPTABLES SUPPORT
|
||||
----------------
|
||||
|
||||
|
||||
The files libipt_DWISDN.so and libipt_dwisdn.so are for adding
|
||||
ISDN support to iptables. This enables you to configure what type
|
||||
of IP packet is permitted to cause a dialout, for example.
|
||||
|
||||
The file libipt_ISDNDIAL.so is a helper target for dynip MASQUARING in
|
||||
the nat-table POSTROUTING hook. Wich trigger dialing and
|
||||
queue's frames through interface goes online and ip-addr set correctly.
|
||||
Therefor ISDNDIAL must be placed before the MASQUARING target.
|
||||
The file libipt_ISDNDIAL.so is a helper target for dynip MASQUERADING
|
||||
in the nat-table POSTROUTING hook. It triggers dialing and therefore
|
||||
ISDNDIAL must be placed before the MASQUERADING target.
|
||||
|
||||
A short overview you get with:
|
||||
You can get a short overview with:
|
||||
iptables -m dwisdn --help
|
||||
iptables -j DWISDN --help
|
||||
iptables -j ISDNDIAL --help
|
||||
|
||||
Tiny tip for dynip-interfaces:
|
||||
Tiny example for dynip-interfaces:
|
||||
iptables -A OUTPUT -p tcp ! --sync \
|
||||
-o ippp+ \
|
||||
-m dwisdn ! --f_eq_iadr \
|
||||
-j REJECT --reject-with tcp-reset
|
||||
|
||||
Closed old ESTABLISHED tcp connections.
|
||||
No dial is triggered :-)
|
||||
When old ESTABLISHED tcp connections are closed,
|
||||
no dial is triggered :-)
|
||||
|
||||
|
||||
|
||||
The sources are included, however to compile these files you need
|
||||
the netfilter 1.1.2 cvs-tree and the patch "patch-netfilter-1.1.2_isdn".
|
||||
Because of this, the compiled .so files have been included for
|
||||
|
|
Loading…
Reference in New Issue