From d98139112027ce67c51d38899dae69ba06b702ba Mon Sep 17 00:00:00 2001 From: bol-van Date: Tue, 10 Feb 2026 12:06:26 +0300 Subject: [PATCH] update docs --- docs/manual.en.md | 9 +++++++++ docs/manual.md | 8 ++++++++ 2 files changed, 17 insertions(+) diff --git a/docs/manual.en.md b/docs/manual.en.md index 7f863e1..80f1b0d 100644 --- a/docs/manual.en.md +++ b/docs/manual.en.md @@ -5203,6 +5203,15 @@ ipt_first_packets() Outputs to stdout: `-m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes $RANGE`. `RANGE` is defined as "1:$1". If `$1` is "keepalive", nothing is output (no connbytes filter). +``` +ipt_port_ipset() +# $1 - ipset name +# $2 - comma separated port or port range list. ranges are por1-port2 +``` + +Creates "bitmap:port" ipset filled with the supplied port list. If the set already exists it's elements are replaced. + + ##### Working with nftables ``` diff --git a/docs/manual.md b/docs/manual.md index 8dbbbcc..4256b97 100644 --- a/docs/manual.md +++ b/docs/manual.md @@ -5382,6 +5382,14 @@ ipt_first_packets() Выдает в stdout "-m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes $RANGE". RANGE определяется как "1:$1". Если $1 = "keepalive", не выдается ничего (нет фильтра по connbytes). +``` +ipt_port_ipset() +# $1 - имя ipset +# $2 - список портов через запятую. диапазоны через "-" +``` + +Создает ipset типа bitamp:port со списком портов. Если ipset уже существует, заменяет в нем элементы. + ##### Работа с nftables ```