From bdb9c34e1132b4d557b06d27ca407bb406400a0d Mon Sep 17 00:00:00 2001
From: Mira Limbeck <m.limbeck@proxmox.com>
Date: Fri, 29 May 2020 14:22:05 +0200
Subject: [PATCH] add documentation for the new icmp-type parameter

Signed-off-by: Mira Limbeck <m.limbeck@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
---
 pve-firewall-rules-opts.adoc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pve-firewall-rules-opts.adoc b/pve-firewall-rules-opts.adoc
index 4e674af..22ee5d6 100644
--- a/pve-firewall-rules-opts.adoc
+++ b/pve-firewall-rules-opts.adoc
@@ -8,7 +8,10 @@ Restrict TCP/UDP destination port. You can use service names or simple numbers (
 
 `--icmp-type` `<string>` ::
 
-Specify icmp-type. Only valid if proto equals 'icmp'.
+Restrict ICMP packets to specific types. You can either use the names as
+ip[6]tables ('ip[6]tables -p icmp[v6] -h') provides them, or use the
+Type[/Code] value, for example 'network-unreachable' which corresponds to
+'3/0'.
 
 `--iface` `<string>` ::