libxt_SET.man revision a3c1c206a665d81afa2363507a5e162c20694311 
1This module adds and/or deletes entries from IP sets which can be defined
2by ipset(8).
3.TP
4\fB\-\-add\-set\fP \fIsetname\fP \fIflag\fP[\fB,\fP\fIflag\fP...]
5add the address(es)/port(s) of the packet to the set
6.TP
7\fB\-\-del\-set\fP \fIsetname\fP \fIflag\fP[\fB,\fP\fIflag\fP...]
8delete the address(es)/port(s) of the packet from the set
9.IP
10where \fIflag\fP(s) are
11.BR "src"
12and/or
13.BR "dst"
14specifications and there can be no more than six of them.
15.TP
16\fB\-\-timeout\fP \fIvalue\fP
17when adding an entry, the timeout value to use instead of the default
18one from the set definition
19.TP
20\fB\-\-exist\fP
21when adding an entry if it already exists, reset the timeout value
22to the specified one or to the default from the set definition
23.PP
24Use of -j SET requires that ipset kernel support is provided, which, for
25standard kernels, is the case since Linux 2.6.39.
26