aboutsummaryrefslogtreecommitdiffstats
path: root/README.md
diff options
context:
space:
mode:
authorKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2017-01-08 22:17:19 +0200
committerKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2017-01-24 01:52:49 +0200
commit0a9a8db212d5d45b136c103fd6b8db6d16dad895 (patch)
tree1bf844fe28b170c8ff6c4ad69e178fbb12823d31 /README.md
parentaaececd5db5356acffc23283ffc9c3483d677476 (diff)
downloadawall-0a9a8db212d5d45b136c103fd6b8db6d16dad895.tar.bz2
awall-0a9a8db212d5d45b136c103fd6b8db6d16dad895.tar.xz
Limit: split mask attribute
Diffstat (limited to 'README.md')
-rw-r--r--README.md23
1 files changed, 11 insertions, 12 deletions
diff --git a/README.md b/README.md
index bba5fff..3c3dd10 100644
--- a/README.md
+++ b/README.md
@@ -209,18 +209,17 @@ default value is 1.
The maximum rate defined by a limit may be absolute or specific to
blocks of IP addresses or pairs thereof. The number of most
significant bits taken into account when mapping the source and
-destination IP addresses to blocks can be specified with the **mask**
-attribute. The **mask** attribute is an object with two attributes
-defining the prefix lengths, named **src** and
-**dest**. Alternatively, the **mask** object may have object
-attributes named **inet** and **inet6** which contain address
-family&ndash;specific prefix length pairs. If **mask** is defined as
-an integer, it is interpreted as the source address prefix length.
-
-The default value for **mask** depends on the type of the enclosing
-object. For [filters](#filter), the default behavior is to apply the
-limit for each source address separately. For [logging classes](#log),
-the limit is considered absolute by default.
+destination IP addresses to blocks can be specified with the
+**src-mask** and **dest-mask** attributes, respectively. If set to
+**true** (boolean), all bits are considered. The value of **false**
+causes the respective address to be ignored. Address
+family&ndash;specific prefix lengths can be set by defining the mask
+as an object with attributes named **inet** and **inet6**.
+
+The default behavior with respect to the masks depends on the type of
+the enclosing object. For [filters](#filter), the default behavior is
+to apply the limit for each source address separately. For [logging
+classes](#log), the limit is considered absolute by default.
### <a name="log"></a>Logging Classes