From: Mark Wooding <mdw@distorted.org.uk>
Date: Tue, 11 Dec 2012 09:43:15 +0000 (+0000)
Subject: functions.m4: Fix up commentary for `matchnets'.
X-Git-Url: https://git.distorted.org.uk/~mdw/firewall/commitdiff_plain/11732033b49fdd106db47e677bcce8a1ca81460a

functions.m4: Fix up commentary for `matchnets'.
---

diff --git a/functions.m4 b/functions.m4
index 03f6af5..d7b42b2 100644
--- a/functions.m4
+++ b/functions.m4
@@ -559,15 +559,18 @@ iface () {
   done
 }
 
+## matchnets OPT WIN FLAGS PREPARE BASE SUFFIX NEXT NET [NET ...]
+##
 ## Build rules which match a particular collection of networks.
+##
 ## Specifically, use the address-comparison operator OPT (typically `-s' or
-## `-d') to match the addresses of NOT, writing the rules to the chain
-## BASESUFFIX.  If we find a match, dispatch to WIN-CLASS, where CLASS is
-## the class of the matching network.  In order to deal with networks
-## containing negative address ranges, more chains may need to be
-## constructed; they will be named BASE#Q for sequence numbers Q starting
-## with NEXT.  All of this happens on the `mangle' table, and there isn't
-## (currently) a way to tweak this.
+## `-d') to match the addresses of each NET, writing the rules to the chain
+## BASESUFFIX.  If we find a match, dispatch to WIN-CLASS, where CLASS is the
+## class of the matching network.  In order to deal with networks containing
+## negative address ranges, more chains may need to be constructed; they will
+## be named BASE#Q for sequence numbers Q starting with NEXT.  All of this
+## happens on the `mangle' table, and there isn't (currently) a way to tweak
+## this.
 ##
 ## The FLAGS gather additional interesting information about the job,
 ## separated by colons.  The only flag currently is :default: which means