From 208b3c53ddaaafd317f298a0c116739b09157785 Mon Sep 17 00:00:00 2001
From: Major Hayden <major@mhtx.net>
Date: Wed, 3 Oct 2018 14:39:57 -0500
Subject: [PATCH] Docs: iptables module cleanup (#46368)

Signed-off-by: Major Hayden <major@redhat.com>
---
 lib/ansible/modules/system/iptables.py | 27 +++++++++++++++++---------
 1 file changed, 18 insertions(+), 9 deletions(-)

diff --git a/lib/ansible/modules/system/iptables.py b/lib/ansible/modules/system/iptables.py
index 66f29ce452f..3ae671055bc 100644
--- a/lib/ansible/modules/system/iptables.py
+++ b/lib/ansible/modules/system/iptables.py
@@ -15,13 +15,13 @@ ANSIBLE_METADATA = {'metadata_version': '1.1',
 DOCUMENTATION = '''
 ---
 module: iptables
-short_description: Modify the systems iptables
+short_description: Modify iptables rules
 version_added: "2.0"
 author:
 - Linus Unnebäck (@LinusU) <linus@folkdatorn.se>
 - Sébastien DA ROCHA (@sebastiendarocha)
 description:
-  - Iptables is used to set up, maintain, and inspect the tables of IP packet
+  - C(iptables) is used to set up, maintain, and inspect the tables of IP packet
     filter rules in the Linux kernel.
   - This module does not handle the saving and/or loading of rules, but rather
     only manipulates the current rules that are present in memory. This is the
@@ -64,10 +64,14 @@ options:
     default: ipv4
   chain:
     description:
-      - Chain to operate on.
-      - "This option can either be the name of a user defined chain or any of
-        the builtin chains: 'INPUT', 'FORWARD', 'OUTPUT', 'PREROUTING',
-        'POSTROUTING', 'SECMARK', 'CONNSECMARK'."
+      - "Specify the iptables chain to modify. This could be a user-defined chain or one of the standard iptables chains:"
+      - C(INPUT)
+      - C(FORWARD)
+      - C(OUTPUT)
+      - C(PREROUTING)
+      - C(POSTROUTING)
+      - C(SECMARK)
+      - C(CONNSECMARK)
   protocol:
     description:
       - The protocol of the rule or of the packet to check.
@@ -227,9 +231,14 @@ options:
   ctstate:
     description:
       - "C(ctstate) is a list of the connection states to match in the conntrack
-        module.
-        Possible states are: 'INVALID', 'NEW', 'ESTABLISHED', 'RELATED',
-        'UNTRACKED', 'SNAT', 'DNAT'"
+        module. Possible states are:"
+      - C(INVALID)
+      - C(NEW)
+      - C(ESTABLISHED)
+      - C(RELATED)
+      - C(UNTRACKED)
+      - C(SNAT)
+      - C(DNAT)
     choices: [ DNAT, ESTABLISHED, INVALID, NEW, RELATED, SNAT, UNTRACKED ]
     default: []
   limit: