Make ignorecommand help clearer

1 year ago · c38f6654f7
parent 48c91dfb6b
commit c38f6654f7
1 changed files with 1 additions and 1 deletions
--- a/man/jail.conf.5
+++ b/man/jail.conf.5
@ -247,7 +247,7 @@ boolean value (default true) indicates the banning of own IP addresses should be
 list of IPs not to ban. They can include a DNS resp. CIDR mask too. The option affects additionally to \fBignoreself\fR (if true) and don't need to contain own DNS resp. IPs of the running host.
 .TP
 .B ignorecommand
-command that is executed to determine if the current candidate IP for banning (or failure-ID for raw IDs) should not be banned. The option affects additionally to \fBignoreself\fR and \fBignoreip\fR and will be first executed if both don't hit.
+command that is executed to determine if the current candidate IP for banning (or failure-ID for raw IDs) should not be banned. This option operates alongside the ignoreself and ignoreip options. It is executed first, only if neither ignoreself nor ignoreip match the criteria.
 .br
 IP will not be banned if command returns successfully (exit code 0).
 Like ACTION FILES, tags like <ip> are can be included in the ignorecommand value and will be substituted before execution.