From: Laurence J. Lane Description: man page hyphen cleanup --- a/extensions/libip6t_DNPT.man +++ b/extensions/libip6t_DNPT.man @@ -23,7 +23,7 @@ .PP You may need to enable IPv6 neighbor proxy: .IP -sysctl -w net.ipv6.conf.all.proxy_ndp=1 +sysctl \-w net.ipv6.conf.all.proxy_ndp=1 .PP You also have to use the .B NOTRACK --- a/extensions/libip6t_SNPT.man +++ b/extensions/libip6t_SNPT.man @@ -23,7 +23,7 @@ .PP You may need to enable IPv6 neighbor proxy: .IP -sysctl -w net.ipv6.conf.all.proxy_ndp=1 +sysctl \-w net.ipv6.conf.all.proxy_ndp=1 .PP You also have to use the .B NOTRACK --- a/extensions/libxt_HMARK.man +++ b/extensions/libxt_HMARK.man @@ -56,5 +56,5 @@ \-j HMARK \-\-hmark-tuple ct,src,dst,proto \-\-hmark-offset 10000 \-\-hmark\-mod 10 \-\-hmark\-rnd 0xfeedcafe .PP -iptables \-t mangle \-A PREROUTING -j HMARK \-\-hmark\-offset 10000 +iptables \-t mangle \-A PREROUTING \-j HMARK \-\-hmark\-offset 10000 \-\-hmark-tuple src,dst,proto \-\-hmark-mod 10 \-\-hmark\-rnd 0xdeafbeef --- a/extensions/libxt_SET.man +++ b/extensions/libxt_SET.man @@ -42,5 +42,5 @@ \fB\-\-map\-queue\fP flags can be used in the OUTPUT, FORWARD and POSTROUTING chains. .PP -Use of -j SET requires that ipset kernel support is provided, which, for +Use of \-j SET requires that ipset kernel support is provided, which, for standard kernels, is the case since Linux 2.6.39. --- a/extensions/libxt_TOS.man +++ b/extensions/libxt_TOS.man @@ -32,5 +32,5 @@ a bug whereby IPv6 TOS mangling does not behave as documented and differs from the IPv4 version. The TOS mask indicates the bits one wants to zero out, so it needs to be inverted before applying it to the original TOS field. However, the -aformentioned kernels forgo the inversion which breaks --set-tos and its +aformentioned kernels forgo the inversion which breaks \-\-set\-tos and its mnemonics. --- a/extensions/libxt_bpf.man +++ b/extensions/libxt_bpf.man @@ -4,7 +4,7 @@ \fB\-\-bytecode\fP \fIcode\fP Pass the BPF byte code format (described in the example below). .PP -The code format is similar to the output of the tcpdump -ddd command: one line +The code format is similar to the output of the tcpdump \-ddd command: one line that stores the number of instructions, followed by one line for each instruction. Instruction lines follow the pattern 'u16 u8 u8 u32' in decimal notation. Fields encode the operation, jump offset if true, jump offset if --- a/extensions/libxt_cluster.man +++ b/extensions/libxt_cluster.man @@ -27,7 +27,7 @@ iptables \-A PREROUTING \-t mangle \-i eth2 \-m cluster \-\-cluster\-total\-nodes 2 \-\-cluster\-local\-node 1 \-\-cluster\-hash\-seed 0xdeadbeef -\-j MARK -\-set\-mark 0xffff +\-j MARK \-\-set\-mark 0xffff .IP iptables \-A PREROUTING \-t mangle \-i eth1 \-m mark ! \-\-mark 0xffff \-j DROP --- a/extensions/libxt_osf.man +++ b/extensions/libxt_osf.man @@ -35,11 +35,11 @@ OS fingerprints are loadable using the \fBnfnl_osf\fP program. To load fingerprints from a file, use: .PP -\fBnfnl_osf -f /usr/share/xtables/pf.os\fP +\fBnfnl_osf \-f /usr/share/xtables/pf.os\fP .PP To remove them again, .PP -\fBnfnl_osf -f /usr/share/xtables/pf.os -d\fP +\fBnfnl_osf \-f /usr/share/xtables/pf.os \-d\fP .PP The fingerprint database can be downlaoded from http://www.openbsd.org/cgi-bin/cvsweb/src/etc/pf.os . --- a/extensions/libxt_set.man +++ b/extensions/libxt_set.man @@ -61,5 +61,5 @@ The option \fB\-\-match\-set\fP can be replaced by \fB\-\-set\fP if that does not clash with an option of other extensions. .PP -Use of -m set requires that ipset kernel support is provided, which, for +Use of \-m set requires that ipset kernel support is provided, which, for standard kernels, is the case since Linux 2.6.39.