From 96fa692bf6f40470dba221b61d651d4363affd09 Mon Sep 17 00:00:00 2001 From: puneetse <22071208+puneetse@users.noreply.github.com> Date: Fri, 20 Sep 2019 16:50:10 -0700 Subject: [PATCH] Fix command order in tallow.conf man page An ipset needs to be created before an iptables rule can reference it. --- man/tallow.conf.5.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/man/tallow.conf.5.md b/man/tallow.conf.5.md index e553717..fdea4a0 100644 --- a/man/tallow.conf.5.md +++ b/man/tallow.conf.5.md @@ -61,11 +61,11 @@ before tallow starts up and remove them afterwards. To create them manually, you can use the following commands: ``` - iptables -t filter -I INPUT 1 -m set --match-set tallow src -j DROP ipset create tallow hash:ip family inet timeout 3600 + iptables -t filter -I INPUT 1 -m set --match-set tallow src -j DROP - ip6tables -t filter -I INPUT 1 -m set --match-set tallow6 src -j DROP ipset create tallow6 hash:ip family inet6 timeout 3600 + ip6tables -t filter -I INPUT 1 -m set --match-set tallow6 src -j DROP ``` ## SEE ALSO