You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: doc/examples.rst
+20-10Lines changed: 20 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -153,19 +153,19 @@ in/out inteface etc is. To print out all rules in the FILTER table::
153
153
>>> print "======================="
154
154
155
155
As you see in the code snippet above, rules are organized into chains, and
156
-
chains are in tables. You have a fixed set of tables; for IPv4::
156
+
chains are in tables. You have a fixed set of tables; for IPv4:
157
157
158
-
* FILTER,
159
-
* NAT,
160
-
* MANGLE and
161
-
* RAW.
158
+
* ``FILTER``,
159
+
* ``NAT``,
160
+
* ``MANGLE`` and
161
+
* ``RAW``.
162
162
163
-
For IPv6 the tables are::
163
+
For IPv6 the tables are:
164
164
165
-
* FILTER,
166
-
* MANGLE,
167
-
* RAW and
168
-
* SECURITY.
165
+
* ``FILTER``,
166
+
* ``MANGLE``,
167
+
* ``RAW`` and
168
+
* ``SECURITY``.
169
169
170
170
To access a table::
171
171
@@ -409,3 +409,13 @@ commit it::
409
409
410
410
The drawback is that `Table` is a singleton, and if you disable autocommit, it
411
411
will be disabled for all instances of that `Table`.
412
+
413
+
Known Issues
414
+
============
415
+
416
+
These issues are mainly caused by complex interaction with upstream's
417
+
Netfilter implementation, and will require quite significant effort to
418
+
fix. Workarounds are available.
419
+
420
+
- The ``hashlimit`` match requires explicitly setting ``hashlimit_htable_expire``. See `Issue #201 <https://github.com/ldx/python-iptables/issues/201>`_.
421
+
- The ``NOTRACK`` target is problematic; use ``CT --notrack`` instead. See `Issue #204 <https://github.com/ldx/python-iptables/issues/204>`_.
0 commit comments