Document that we (now) allow mac match in FORWARD
diff --git a/iptables.8 b/iptables.8
index 38f14ac..2fab58b 100644
--- a/iptables.8
+++ b/iptables.8
@@ -382,9 +382,10 @@
Match source MAC address. It must be of the form XX:XX:XX:XX:XX:XX.
Note that this only makes sense for packets entering the
.BR PREROUTING ,
+.B FORWARD
or
.B INPUT
-chains from an ethernet device.
+chains for packets coming from an ethernet device.
.SS limit
This module matches at a limited rate using a token bucket filter: it
can be used in combination with the LOG target to give limited