Process params file before shorewall.conf

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@482 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb

Shorewall/firewall

@@ -4306,6 +4306,14 @@ do_initialize() {
 
     trap "rm -rf $TMP_DIR; my_mutex_off; exit 2" 1 2 3 4 5 6 9
 
+    if [ -n "$SHOREWALL_DIR" -a -f $SHOREWALL_DIR/params ]; then
+	params=$SHOREWALL_DIR/params
+    else
+	params=/etc/shorewall/params
+    fi
+
+    [ -f $params ] && echo "Processing $params..." && . $params
+
     if [ -n "$SHOREWALL_DIR" -a -f $SHOREWALL_DIR/shorewall.conf ]; then
 	config=$SHOREWALL_DIR/shorewall.conf
     else
@@ -4313,6 +4321,7 @@ do_initialize() {
     fi
 
     if [ -f $config ]; then
+	echo "Processing $config..."
 	. $config
     else
 	echo "$config does not exist!" >&2
@@ -4419,8 +4428,6 @@ do_initialize() {
 	CLEAR_TC=
     fi
 
-    run_user_exit params
-
     #
     # Strip the files that we use often
     #

Shorewall/rules

@@ -97,6 +97,8 @@
 #				2. In DNAT rules, only IP addresses are
 #				   allowed; no FQDNs or subnet addresses
 #				   are permitted.
+#				3. You may not specify both an interface and
+#				   an address.
 #
 #			The port that the server is listening on may be
 #			included and separated from the server's IP address by