Skip to content

Commit

Permalink
xdp-filter: Update examples in documentation
Browse files Browse the repository at this point in the history
The examples use the outdated flag `-w`. This commit replaces them with the
policy option to achieve the same funcitonality.

Signed-off-by: Tobias Böhm <[email protected]>
  • Loading branch information
aibor authored and tohojo committed Sep 5, 2022
1 parent d8cd007 commit 2265125
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
4 changes: 2 additions & 2 deletions xdp-filter/README.org
Original file line number Diff line number Diff line change
Expand Up @@ -271,15 +271,15 @@ To filter all packets *except* those from IP address fc00:dead:cafe::1 issue the
following commands (careful, this can lock you out of remote access!):

#+begin_src sh
# xdp-filter load eth0 -f ipv6 -w
# xdp-filter load eth0 -f ipv6 -p deny
# xdp-filter ip fc00:dead:cafe::1 -m src
#+end_src

To allow packets from *either* IP fc00:dead:cafe::1 *or* arriving on port 22,
issue the following (careful, this can lock you out of remote access!):

#+begin_src sh
# xdp-filter load eth0 -f ipv6,tcp -w
# xdp-filter load eth0 -f ipv6,tcp -p deny
# xdp-filter port 22
# xdp-filter ip fc00:dead:cafe::1 -m src
#+end_src
Expand Down
4 changes: 2 additions & 2 deletions xdp-filter/xdp-filter.8
Original file line number Diff line number Diff line change
Expand Up @@ -342,7 +342,7 @@ following commands (careful, this can lock you out of remote access!):

.RS
.nf
\fC# xdp-filter load eth0 -f ipv6 -w
\fC# xdp-filter load eth0 -f ipv6 -p deny
# xdp-filter ip fc00:dead:cafe::1 -m src
\fP
.fi
Expand All @@ -354,7 +354,7 @@ issue the following (careful, this can lock you out of remote access!):

.RS
.nf
\fC# xdp-filter load eth0 -f ipv6,tcp -w
\fC# xdp-filter load eth0 -f ipv6,tcp -p deny
# xdp-filter port 22
# xdp-filter ip fc00:dead:cafe::1 -m src
\fP
Expand Down

0 comments on commit 2265125

Please sign in to comment.