DOC: fix missed entry for "set-{src,dst}{,-port}"
There was the same explanation for tcp-request connection that I missed
in previous patch.
diff --git a/doc/configuration.txt b/doc/configuration.txt
index 61d4e46..620043f 100644
--- a/doc/configuration.txt
+++ b/doc/configuration.txt
@@ -8763,7 +8763,8 @@
tcp-request connection set-src src,ipmask(24)
- When set-src is successful, the source port is set to 0.
+ When possible, set-src preserves the original source port as long as the
+ address family allows it, otherwise the source port is set to 0.
- set-src-port <expr> :
Is used to set the source port address to the value of specified
@@ -8776,8 +8777,9 @@
tcp-request connection set-src-port int(4000)
- Be careful to use "set-src-port" after "set-src", because "set-src" sets
- the source port to 0.
+ When possible, set-src-port preserves the original source address as long
+ as the address family supports a port, otherwise it forces the source
+ address to IPv4 "0.0.0.0" before rewriting the port.
- set-dst <expr> :
Is used to set the destination IP address to the value of specified
@@ -8794,6 +8796,9 @@
tcp-request connection set-dst dst,ipmask(24)
tcp-request connection set-dst ipv4(10.0.0.1)
+ When possible, set-dst preserves the original destination port as long as
+ the address family allows it, otherwise the destination port is set to 0.
+
- set-dst-port <expr> :
Is used to set the destination port address to the value of specified
expression. If you want to connect to the new address/port, use
@@ -8807,6 +8812,10 @@
tcp-request connection set-dst-port int(4000)
+ When possible, set-dst-port preserves the original destination address as
+ long as the address family supports a port, otherwise it forces the
+ destination address to IPv4 "0.0.0.0" before rewriting the port.
+
- "silent-drop" :
This stops the evaluation of the rules and makes the client-facing
connection suddenly disappear using a system-dependant way that tries