From 09e6003f0ceda79a9873b481fad68f3fd16f3508 Mon Sep 17 00:00:00 2001 From: teastep Date: Mon, 21 Feb 2005 23:18:35 +0000 Subject: [PATCH] Documentation Updates git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1966 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall-docs2/Documentation_Index.xml | 9 +- Shorewall-docs2/IPSEC-2.6.xml | 5 +- Shorewall-docs2/OPENVPN.xml | 4 +- Shorewall-docs2/Shorewall_Doesnt.xml | 9 +- Shorewall-docs2/Shorewall_and_Routing.xml | 170 ++++++++++++++++++++++ Shorewall-docs2/images/Thumbs.db | Bin 508924 -> 508924 bytes Shorewall-docs2/support.xml | 8 +- 7 files changed, 194 insertions(+), 11 deletions(-) create mode 100644 Shorewall-docs2/Shorewall_and_Routing.xml diff --git a/Shorewall-docs2/Documentation_Index.xml b/Shorewall-docs2/Documentation_Index.xml index 974ab11e3..7c77dc632 100644 --- a/Shorewall-docs2/Documentation_Index.xml +++ b/Shorewall-docs2/Documentation_Index.xml @@ -15,7 +15,7 @@ - 2005-01-19 + 2005-02-19 2001-2005 @@ -447,6 +447,11 @@ url="shorewall_prerequisites.htm">Requirements + + Routing and + Shorewall + + Routing on One Interface @@ -663,4 +668,4 @@ Creation - + \ No newline at end of file diff --git a/Shorewall-docs2/IPSEC-2.6.xml b/Shorewall-docs2/IPSEC-2.6.xml index 1adb54f49..f2b1e9d20 100644 --- a/Shorewall-docs2/IPSEC-2.6.xml +++ b/Shorewall-docs2/IPSEC-2.6.xml @@ -15,7 +15,7 @@ - 2005-02-17 + 2005-02-19 2004 @@ -42,7 +42,8 @@ and you must be running Shorewall 2.1.5 or later (with Shorewall 2.2.0 Beta 1 or later recommended). The Netfilter patches are available from Netfilter Patch-O-Matic-NG and are also included in some commercial - distributions (most notably SuSE 9.1). + distributions (most notably SuSE 9.1 and + 9.2). diff --git a/Shorewall-docs2/OPENVPN.xml b/Shorewall-docs2/OPENVPN.xml index fb8953cfb..6013d9247 100644 --- a/Shorewall-docs2/OPENVPN.xml +++ b/Shorewall-docs2/OPENVPN.xml @@ -21,7 +21,7 @@ - 2005-01-29 + 2005-02-08 2003 @@ -52,7 +52,7 @@ Source project and is licensed under the GPL. OpenVPN can be downloaded from http://openvpn.sourceforge.net/. + url="http://openvpn.net/">http://openvpn.net/. OpenVPN support was added to Shorewall in version 1.3.14. diff --git a/Shorewall-docs2/Shorewall_Doesnt.xml b/Shorewall-docs2/Shorewall_Doesnt.xml index 52f35bc87..02ca7745f 100644 --- a/Shorewall-docs2/Shorewall_Doesnt.xml +++ b/Shorewall-docs2/Shorewall_Doesnt.xml @@ -13,13 +13,15 @@ Eastep - 2004-11-14 + 2005-02-20 2003 2004 + 2005 + Thomas M Eastep @@ -48,6 +50,11 @@ 2.4.0) + + Act as a Proxy (although it can be used with a separate proxy + such as Squid or Socks). + + Do content filtering: diff --git a/Shorewall-docs2/Shorewall_and_Routing.xml b/Shorewall-docs2/Shorewall_and_Routing.xml new file mode 100644 index 000000000..1b9713679 --- /dev/null +++ b/Shorewall-docs2/Shorewall_and_Routing.xml @@ -0,0 +1,170 @@ + + +
+ + + + Shorewall and Routing + + + + Tom + + Eastep + + + + 2005-02-19 + + + 2005 + + Thomas M. Eastep + + + + Permission is granted to copy, distribute and/or modify this + document under the terms of the GNU Free Documentation License, Version + 1.2 or any later version published by the Free Software Foundation; with + no Invariant Sections, with no Front-Cover, and with no Back-Cover + Texts. A copy of the license is included in the section entitled + GNU Free Documentation + License. + + + +
+ Routing vs. Firewalling. + + One of the most misunderstood aspects of Shorewall is its + releationship with routing. This article attempts to clear some of the fog + that surrounds this issue. + + As a general principle: + + + + Routing determines where packets are to be sent. + + + + Once routing determines where the packet is to go, the firewall + (Shorewall) determines if the packet is allowed to go there. + + + + There are ways that Shorewall can affect routing which are described + in the following sections. +
+ +
+ Routing and Netfilter + + The following diagram shows the relationship between routing + decisions and Netfilter. + + + + The light blue boxes indicate where routing decisions are made. The + green boxes show where Netfilter processing takes place (as directed by + Shorewall). You will notice that there are two different paths through + this maze, depending on where the packet originates. We will look at each + of these separately. + +
+ Packets Entering the Firewall from Outside + + When a packet arrives from outside, it first undergoes Netfilter + PREROUTING processing. In Shorewall terms: + + + + Packets may be marked using entries in the /etc/shorewall/tcrules file. Entries in that file + containing ":P" in the mark column are applied here as are rules + that default to the MARK_IN_FORWARD_CHAIN=No setting in + /etc/shorewall/shorewall.conf. These marks may + be used to specify that the packet should be routed using an + alternate routing table; see the Shorewall Squid + documentation for examples. + + + + The destination IP address may be rewritten as a consequence + of: + + + + DNAT[-] rules. + + + + REDIRECT[-] rules. + + + + Entries in /etc/shorewall/nat. + + + + + + So the only influence that Shorewall has over where these packets + go is via NAT or by marking them so that they may be routed using an + alternate routing table. +
+ +
+ Packets Originating on the Firewall + + Processing of packets that originate on the firewall itself are + initially routed using the default routing table then passed through the + OUTPUT chains. Shorewall can influence what happens here: + + + + Packets may be marked using entries in the /etc/shorewall/tcrules file (rules with "$FW" in + the SOURCE column). These marks may be used to specify that the + packet should be re-routed using an alternate routing table. + + + + The destination IP address may be rewritten as a consequence + of: + + + + DNAT[-] rules that specify $FW as the SOURCE. + + + + Entries in /etc/shorewall/nat that + have "Yes" in LOCAL column. + + + + + + So again in this case, the only influence that Shorewall has over + the packet destination is NAT or marking. +
+
+ +
+ Alternate Routing Table Configuration + + The Shorewall Squid + documentation shows how alternate routing tables can be created + and used. That documentation shows how you can use logic in + /etc/shorewall/init to create and populate an + alternate table and to add a routing rule for its use. It is fine to use + that technique so long as you understand that you are basically just using + the Shorewall init script (/etc/init.d/shorewall) to + configure your alternate routing table at boot time and that other than as described in the previous section, there is no + connection between Shorewall and routing. +
+
\ No newline at end of file diff --git a/Shorewall-docs2/images/Thumbs.db b/Shorewall-docs2/images/Thumbs.db index d602faef9c34f076a54062ec8fbce96061ea1390..d8abb6f1905c3b2e4d4e07e6d0324b50cefbe0d9 100644 GIT binary patch delta 5620 zcma)=2UHYG*2kNSBL^gmx} zBMd<@s318G%q;Kid;8oy`+aBoRGqr@yZ2OgRd?U|cb~szJ%7#m!I6*%5b)w`uXZH_ zCkUM=BP&7SN$(1GM0h{VEy4CG#1J^hGcSTW5>mlge{|O-m0*G%& zeASuIV-pN0VSpw@`6XcKaa|HOJF`#B}@T|7Cm(3A*wO+~>j8jk1s7p)B(L>S`LQ>d0*DE#l zc-~GKIq8@fuCVbbVbqm}B@UNaOa51uS21&^_Wf1J-1gO+bc6c4+)`>Lbq)?su0xyV zg=l3&s-2zHebbv9QK%1maIfZDfp*VkXEP5)bU(-fA+f#;b);<9+$iMq+6nQ=WjAaS zG)bXg>7HP!(;Gr!5?4tkriDNg`{u}Jj8EI~f@U>HNW@rE3@bV5!=^smH}|4$ZyzRE zMIpl0X0}#kQ@c6Yo2wZxZ$ZmL)GlC zpVUpa|59QyOB(Ix_fR*Ro&Iru-ZlL7>`vb=|5xy+<_va>q4WCaLo_rq^ct^cQjjAV zXtnV4U48J{RolF~SJ)pyO!C?t$*dNZ^6M`O?u7H_MbyB>A#7S(aQrE{zP2vtfpy~A z_wM<{MBd~ZZX}M86FbOwy4lFtB zMbn%DoE+zkjFovAX9KnxHYw=0LrmG1K?*eC#;2Q&<04K%=riDxWaEf3Zowbq1nU+518Y4#Z;1}q5Adh`_iHdfZyU;xSb>XB%fqh55rhB#z61R0VM zJbAwt$8fI5TyB!F42~o3BSy_QcbjsxtJN#6F1A&`)_ zlncp%Qi<=D(@Bz-M87*T^gzURd-zCFS@uJHBa|@~|peAq#Y6xt}%>3`n;YfeW^k zvFDZx%$6OWZZwTc_qn^{Gw&EHQd)4?{LCgX?eq;XWAW~3yVn!yuj=(KAbxF)P-3AW znxjK$WKNR2CH#;$$BU?T3^pgJ*~dz6E!XqGTmb@|_NUw-&M!XsB;|a@m?0s>{|aGX zD4J~AFV&RO=2bDU5cBd5vtrlo576tk+3D$Tj$B&(qcv4Wnp?A2f)-U58aSCAYL(1& zp_&b_Vme^5%J$Ctlv`PBze=Mi|9hF{dXnI7Lr)NtUG%FBl`}-Wmy{|nwr?!J$|p4t z8;A-!^+CiQE3ZUP=sF}DJSd0vSRG>ZU2XEx(14-1$6vZg=7( zVozS*wOZi zqulqS_BF^d`J1YXhie?oX!jd-i{o}~?g|u>pQfpo>#lZt-LbG7Hv-ZdsW~w-FG?!L zIlc!~GME#auNSg-O(M(`gV|<{g|2(CLM0hp+(m@E-@Xs;VpeNeHV+Awl3|zEu-lDk zOCA}CxSG$JdZ&DbC99qw+J3db-AIO?^AZWffidbcsmtlv;TPxYau>gcHikxe7?z(@hNtActi`IFW>zXrMHaFZorU`AX64$~H?FR2HIAia6185Zv z5S6Y7yRT^{FtV1Y^KMn~1{Z-?pPW`k5>sL<+42pD>Bp0<1rycBbsuU_ktuhD-V1V1 z-(<`R2dv(aaCzjtD=BOIBYW`Vy=``7{^&**YJGXLWdt@z41;$&J-d3JLK7Edxz0bo zWp;RVGK2%TQcQ7x+wBXcL_M~<{olbA6Uw+a%;&Q|dVh8FdtT_4-OQBk>+DR?qMv-Z zfH_{THLSAxyqWn(*@Hdn2{}b;pr5|qju}>EJ`{WK_3Wk!Ts9y1Frm-8o=Rm~J2Jtp(QW2P8b6YAO?{Q zElBow@nwxgbUbg57+0XNeiw~S-To}mo^`Y~y$t-Gv?AM{nyQObo7v4LtAYu8)%h!K z6kMp|ARMp)?yO&g^0yw?k7|Ekl8+YW@FB2a)J?V7<0zW!e8c4SaF2Lcv`k=RMLr;> zEaJM@O2i5z(@D=FrxyX2o&?d#ix55>05bKSNaBEI&~T*IGu~THRpx7tkTiwNHY=)n z%cLOt+SthP?qE#F2&U&SuMxIUmY0{?XiGJhy(S-hgRQ!HlOS7sYZxZ}%88PyZlag# z=S;Ns`VWJ%`Gg{eMyc+MvIo^qhJj>Jx0j1SOu?ip-dE^ep)@rKV@IZ7URF*@0>0Ce(|SK{d=zziN-YXvl4SS)at#l+@dw zBq<#0&0P!4)pMxH1Dnyyi#Z*A71qgqa85YVhFdF#o&gRpM161)3L$CCb#AQpk>Xu70_;Y6uU-|SIwBGM7-?tYkS+R+=T0$Ir zWNy}DG1Ya7=SR-HyhdSG^|agu$)y65Hol1J32%%)nT2IZtGbgRjDuF8 z?Tpp2f?q}SbdSmk6fK1-K2ix7hpCo#2GWb4mqs1bjZO{z@ZM;5qrbtYxHt^L_8qpv z%pjH@(@-dIlTomp@pkE> z0Qi-?tX{6*Vs)`2ZN#R>OGt-*k=qrvQtD`_#3c|hRR5~WhwPK8z^U?8M$0dlERb?M z{eOq>!iwZZL-@bvmLzD;SuPGRxqJ;DK!34m^m{xAQwCq-_kZhNLh7=#_<&NdE4S0g ziIT>ny4*^oeD{1cO}5*?Q@AfJW*po|<1q?xWe_$RBIh!_0kHm-etlt9AriGO7eO0w zpXA^s0t2bg?T0UHIbh`)Utjq5;ecF*p*e36j5hv9$EY?UOiN=;d)09YVhTe7^NL5!Y#oGqaR8*2A62c01E>sM4{Bq*v%M`3OQroQ z^8`h!75sz6;c-2tSI*A9pcw}DWID=KJ>HMvfX-x#eHt8)&7DnmVO#m;+ij~f=knd7 zkZUHx9AwIzJJ@HRZs*lEQ{Vtj9PnCZlh+9cQlX*fL9s$bIRU#7^!lGf(LEVq0Fbdh8iujn;Pbx^QN3c)Z_1B&%#@2qNF6U+8ZYS|v{NlXYh_*}A_ z3V341Qqij08b_qx~=Qn z*a!#L8F4@uNd9iZxiDqvPK{f0#Rz@!?ZkMudnjtV@bkh6gn(exOeC3~duCwm;xSmg z7Ukn3HTvZccotXCfescIU%-m!N`PS?WUUUNcM{{mc#oK8>;WYH9%XjTfGUyq+pNMg zWnFigv2rHcNVSnB>w+7JJR(g#6I!~JugAs^avVZ8(#AP3pLI8}lDjKYA@cD~X` zi&Djkd8H#S!C9CHjDW^`N+wB~UqB&9_2G&6OeCil%jr>BK%Qwun)o?(bRZ0AU zw9WzWT%QDCstqnU3YB4TFfjo%}5-~_LwJReynL+kWPvudv94#8qtHE&D&SM z;ea2dc6__&4vsn@?3T|w?KlqjBClCwWNZQs+??KQPU@N8mvcYSF0Z(?n&5b3sn1H}XZUqvYFl&;jdKL}dpGI=Sp5V)z z9VSS}*f8XGjOP19G$d-rKC!7c^W7iFd5I;_k)xU`*}o?0tlXar#9&*X)r;G&00bh6WO3~+dJ5u0KfpGaz@x!>X z;9HjMy(7mk2?P1x*$;vEJI@scnIg}0JgeShDA^dHEV%3!qEf}_5As@^=Pc^#5QMH( zT%<^gOguz2eYDslK_m}g^{WXpmm>?N7|SNLh?PClZYL8Wl~Lifv$OrDVlLfLh=G7g z8}B#YR#V2S=?9B=YbnaxSQDj2#@jbj=6A&3gG=!6by_9JtFH9m0LgLeDfD&%>-oM0 zW<}@IBXEC6W;;%v<&oJRhGGKkA0Ew>u7AeT=$br`vwJo!Yk8C=i}zGE*v<6|6NO<} zv62%X+LkYHoagc%6eysses4MGhpxvJNMVK=Q4HFekSK!qN?(uhb1B>RyI?6T;O({A ztt|Yu$2h<@z(LaNduSUA^Qmk6qYc3?tfo1JBeZ9^&q-bf8e1jYBlGC_QiMVvi-x2| zQ%$}-9k;;q5~{-i#+LOOd$6?}kz)l5ufjKKuZU**XD(c$=Rld>vULCPIr`A~WPZ_W zwC-@1!)}Qemtq>x^4CP5etmDSK1COMu;ahxsQBkHX#TY@G(LhjU_=B5e3FMUjTShp zaljhb@QH;-G`jQCMWXyW<@E`H``td@PA1$H;wn?aOBY^}(v3)gG7K=^?4m!vVLslu zQh?Y+i8IrNggzyDYEP{UU4HL&?=}gf6Vf?xGalaaWaWh^IW(L`*R0kU9Pt6St91h> zU2%Za>gB12bTPU;=f^2njELq@SmKs|_2eB;Ee?OC9y8o@{fAZJNAv#xmkrsMLUhcVPy<6UW@BM48o$?T&S{cGCJx}Da_i8;C5pfT=3 zkn%@y#x}=b&z&o-@hURA@>3iNi-&kry^VTv%27vQSSh`L^>Qp7U%{qTRiRDa*>~d( zGwO>~e(Eu4*n`Tckt$sHcB#EMCA~$9fLj0R>8SqI*!)cPEYkw;>Srd~Ewl)XV~YqY z&g>f2WyF+WGgsmy0~RmmGX;NEV1J2#-!-~fNS$4)nsHvd#hFd12Sr2JM*px-S8_)wd;}AEckI>>|9w~B2RAO72E3(Q4WLn zIisTvS9nRWrvHQ7EXwg#8Y+f5E)U|-PzfHyqsr&q)3vGh5)|ldcr`3xt7kdNijy7< zFg693eT7*=rTDtd^C9HxjjFx`YF{JKtn}ErWzCpWuqA8!BXqx&ID!<`zjEWA!MOVS z7Z&vBcUmw2_dUacrZU50%jM|!Ef0L6CGj{-! zAui657nDy}Es%L<8bOIiX7vr>BKiz+7%piR7fQ6-cIaddq{q1JB;$3t(P{lKoO65} zbWgivw~-x?Rx1 zCID+2@Fi@wB4YFu<@r^&XkDJUq%zhaH1cdlTMOnu8-i={q!Ny#4R%aYhJMXB9kt8a zsb6vdFUoB`Z%yR#vY4zFzI3_qtul|F|IhFX%9fF4I~Ldz2ou( zug9CWa!SbT4by&L_7|c{f12i5GK_ZPPF|(@${kSo`7?}jQF$ntSDi(B?5m9E_Y~i-fyDE{1-Fb#IQUGas*7uf?wktR<-C*0)Z{OFrcj-Nwt|e6X60#k{DKoP^T;Q(TWlMTeybz3%h@W8;u7qUL zW9<;gXNhOm^hJxNBfxS0j~TG%l_uxRa@1s$yAceOPhO2p2a>IFn9@)hdi;K#vte;yi9RE{vxI;Qbe zCP2kE_0RHqC4(hUk&odxV%2&=qi<@y6ak6z$%#&;)b1us64ZS^O=n!FlU+s#2Fj|Je=x}!aMpCgdhWd)I^uFlDRL-O=rat)+KE4H z^10nm<;w>9Hej5O6H!{7ZB5v+GYdxI9+@;Gvx>klScT1A=yD9sC6&gKqM#gVE*IrMYKY=sYuxw%ltIrHoqaQu#UkT*4!#Me7Y0L z(f;A4YyySXh$wosWXLbPwCw4>GW+UZiLd(3NO0W2CN-|fdC4p8K9Q*x%Y~YsnAKsJ zLLuVT*&iwYmQTn7tO*%Pr`3@B5e4~xQORF451n#}lo1GIqBrl;#jjGfAK^ekrn1}l z8XWIuV%crfu01dCd^MStJCuAuSE0#rXFcIvR}6#Dj{TidM1;M7iN#MR9SL(ZYvUQ%kh1i`5}AY$)(Cb-E(tv=gV`zf)mvtZKqdSBN>^0}o0oTdJg1pDWer z^cOo4W@Rjh_CBbeHu^628*Xf>K>{GrHLM?HJG76glcz=SVaN*OtYiTs43tw?w z6YDx1%`v;LYBkKtKx=sl@$G1MV9svL<{wK5s%5K0Cn8JA*2-`96_>c5x-`!=_E;R6 zK)+w_eB!6dR|e%?xcBmGlBtE;3k%mPE3=yZKK-$}*aPyd@+obc`_sf8?&LB$rAQDW zk(svykL1;%--SdnUc)uUV+XaB{1n#l<^GzF_Ea@wfcM^tPL2i7Q-hZM$JcEM3v@f+ zLktBk>loVV7Eh~FGNH(SZ;$)~s`0T8XOOn-MCNCm$;xUU`s;PQN40b!CB=pX4_Kr%yItewG@#a)P6uXg}W7~Ie1|yF*B`Tp-4t17!)PA>UcuK1?)uZKQoF82HiSG}o zJyZWJ%&T7kUzG!)pT?xTQmh~6S*rmhTBkagZWMjt=H&>yRA;WwadbHqI0>10vK$aM z=4Nv(Q;o~ZJo1+aH$}!&d-bOEv2;_GoNtihyjHLIb?13Q7}d(Argh^a@xsjs!C5IL z#^?>f8CMRk862ID?F34ZmFc@HW5zxoe;PKi@nHpl`(deOgB=Gu&4lLrLFqZLzVE_9 z3##qoJ>zkFo?_mXMbMk~3C5Vekw1L}H<6fYFZCGd8Fxp7%RehC^|#IYO`Vb{v{}JY z@ib*)FD_%x%p7rjziv^|!{yP@dz)U*r z9K)i+UeLN7sM5IOc*o`jL3#!xYn|Dt=(6_6q|1Sv$8hV3rT1fvp%QstnVeIl+I<;d zxbd5}!(Zv;InAD&=*Fk|hGwki&hJdU-5JK&#=#-)qHn5m4ax_UW;%O(i)Q7`K~;Xo z@bBN%ao%IRXxm58_v=f0$doxDlli7_9Gt(7X2^lt`{!JLmA5^HAN)7msIIGA;S_94 z%y3CR{s_^3=Eeh_PGpsl|bq-zaODDa($ zp+3qkN)cWt8l4{HkpQ(43B$h2O71CtrCe$sk4$MxDVa??eSbt$ z@`i6_f#TUXqOvOq@FfA_;oF3udGPBsqS-z4fx6oR8~baAfHR-UdMd|a1eg-Wtm*D< z1(JZL&kWGi=jGR3NI;XgmE`mFJqD3xkM^bk?GxQk>kAEX*GWLv@9!2VBPQ8oz&X}? zlW=xtq}0>ftGP)Zimqbw?dgVpkJP!sJz=UXXCX9f`AOjb6e{(@tC_3$OOv)%UK`zucTN0wZqTLlGcY!i^Lucj^=W0~iU&HqZ=zR7V-9 z7vC?8AC?K%|!4wp*9KFHU;{v6Z4aL~V^ z8PLh(L*%dxnxZF26>Ut-7A6{G+O~+Y`+Ok*H<*1qa{_}$gQLOrfL}Aoi>LnMH#>hw zB}MS;ro}ssJ;qO}j1BIIwZz>tdd|I9X{0AHS2A-L95!?kdf{h?b1o9R-=V*K)@F!U zw~LkjojO|Wxp<)SIQOW%EH-dQ&SubIywM`har(*%&;-NGBfhxY_lVYckf|7q^eax6 zeM8fljO>PO**U{MF;j=<{!Sb7cR!?6_4N}~xmA)4#LPA)Yw&6@ zI=q{&ck`}f0ri!a1Fr+XGU}BJw9=qn9o?q_su?4mS@)NoJJK08Tgkp=t8ftc{9fn7 zR-R|^_=hPXrU}LMA0Wb-enmfGE@&&ORw-Q6$-enR1kwEj|Aq6CWa)n$@l^3EW3d)3@-oimaP#%v<3i2 z#6be%OA?TXY9PROD!T00r<^7mDj1yF(^1b>RcxsbT~>=$v{j7cxELhD!+>hjL$>Mtz1oq$M%*F+7@;X}A%+BK zUsdx1^~x_6r|zQrj8^SJcRPu?y!Avp->HIVO?m~V{`u`?RW>W_nf}3ny3-5ctpUAZ zv6>-nX!{fKfP#bVTf~@qRg#&YfRL;Xi#k)L7e>)$oFFl-LP>UF+CTzof;;h?5*wet zAMbu30o4YC@`HXts6O!r(flC%PYL|-XL?|*2>5cA;HZH&} z3@c+$9orR?A%B&5e-A%-I5J~D|HX&Av2A?YZ57)}dh4+4aw%qj_SIgu;8xJLm!pNw=i(oiEpDe&%zn4NG1-QD zY&yrT^=V*$+=4=&3AbVhBEspHex%%DxQ1&sG$9E4$1eMiOnMYHX6n#4KN8MMoqh!} za4-5PtUUx-eCUo1b@_$5IlWm7`n~ht9_y?!4y+cUYOLHN_{JqQzr;Or^?*?`IMiOM zrK=I}H!W+@VycBYj>OXo;VY)B`JUlFXZSl7&R82#P+DH6enhc3U^{BoV_n#dGqmJMfIUl+VM*oCGn@?-v12KUt# zT#T8xB=8Rj)oRorazuV0It_@>TeFwX!1pBJ`#bXe$lGE#p8>bW!C2Pi7u<_3ydPZo zi4Ff*G+oD^{(VQq+hsLb#keyCZk#a<#n>%{>{u`UtFh>HgL7m%m znr0K%a&@4Oq`Xis1Bb?>l^pO#!|>B{h=ICCQItj3;jCC-*cTzHK4zmZ9QpWRMHYm7*V4d#o_cFGmd~u$rE0cT)0+n|u@qo`CoXlS zijl!Jk&XT9;r@Wlic42yC+_=h|D#b0;$MM+qYKw+U<{~-~L1S7iov0?{Zi?oc40;AF}is`bujb{C{gyN!dooUpa_0Lm+69fbc}o zGxJW}zhsq3GV$~(ILw1bHyE=5^a=C3!rCDTPDnwrYm9>ajOM+z?u+7c+ c=%sXnVVOTm-Cc?Wn4HDM_sz8{w09Q%3(pt>C;$Ke diff --git a/Shorewall-docs2/support.xml b/Shorewall-docs2/support.xml index 80b4184df..f28e39bf4 100644 --- a/Shorewall-docs2/support.xml +++ b/Shorewall-docs2/support.xml @@ -15,7 +15,7 @@ - 2005-01-24 + 2005-02-20 2001-2005 @@ -123,9 +123,9 @@ - If Shorewall isn't started then - /sbin/shorewall/start. Otherwise - /sbin/shorewall reset. + If Shorewall isn't started then /sbin/shorewall + start. Otherwise /sbin/shorewall + reset.