From 0c63053b309fdf8ecf65540481cf063920adb732 Mon Sep 17 00:00:00 2001 From: Willy Tarreau Date: Fri, 21 Oct 2016 17:52:58 +0200 Subject: [PATCH] DOC: fix missed entry for "set-{src,dst}{,-port}" There was the same explanation for tcp-request connection that I missed in previous patch. --- doc/configuration.txt | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/doc/configuration.txt b/doc/configuration.txt index 61d4e4607..620043f21 100644 --- a/doc/configuration.txt +++ b/doc/configuration.txt @@ -8763,7 +8763,8 @@ tcp-request connection [{if | unless} ] tcp-request connection set-src src,ipmask(24) - When set-src is successful, the source port is set to 0. + When possible, set-src preserves the original source port as long as the + address family allows it, otherwise the source port is set to 0. - set-src-port : Is used to set the source port address to the value of specified @@ -8776,8 +8777,9 @@ tcp-request connection [{if | unless} ] tcp-request connection set-src-port int(4000) - Be careful to use "set-src-port" after "set-src", because "set-src" sets - the source port to 0. + When possible, set-src-port preserves the original source address as long + as the address family supports a port, otherwise it forces the source + address to IPv4 "0.0.0.0" before rewriting the port. - set-dst : Is used to set the destination IP address to the value of specified @@ -8794,6 +8796,9 @@ tcp-request connection [{if | unless} ] tcp-request connection set-dst dst,ipmask(24) tcp-request connection set-dst ipv4(10.0.0.1) + When possible, set-dst preserves the original destination port as long as + the address family allows it, otherwise the destination port is set to 0. + - set-dst-port : Is used to set the destination port address to the value of specified expression. If you want to connect to the new address/port, use @@ -8807,6 +8812,10 @@ tcp-request connection [{if | unless} ] tcp-request connection set-dst-port int(4000) + When possible, set-dst-port preserves the original destination address as + long as the address family supports a port, otherwise it forces the + destination address to IPv4 "0.0.0.0" before rewriting the port. + - "silent-drop" : This stops the evaluation of the rules and makes the client-facing connection suddenly disappear using a system-dependant way that tries