X-Git-Url: https://tinc-vpn.org/git/browse?a=blobdiff_plain;f=doc%2Ftinc.texi;h=7a4d8b803122e98f93102b335d28e8215e0c3cf2;hb=7ee885a1f6776be85e5397eda04f75d98ff0b631;hp=c9bda8e57759f8d21c17f2ff9a8c6d55c66491a2;hpb=ca989c0c8b19901cbd7664a9d2b42aa85c9c176e;p=tinc

diff --git a/doc/tinc.texi b/doc/tinc.texi
index c9bda8e5..7a4d8b80 100644
--- a/doc/tinc.texi
+++ b/doc/tinc.texi
@@ -1055,6 +1055,12 @@ and can also help debugging.
 Incoming packets using the SPTPS protocol are dropped, since they are end-to-end encrypted.
 @end table
 
+@cindex FWMark
+@item FWMark = <@var{value}> (0) [experimental]
+When set to a non-zero value, all TCP and UDP sockets created by tinc will use the given value as the firewall mark.
+This can be used for mark-based routing or for packet filtering.
+This option is currently only supported on Linux.
+
 @cindex Hostnames
 @item Hostnames = <yes|no> (no)
 This option selects whether IP addresses (both real and on the VPN)