From 10335f52ce11ad8e483b966a62449b2cb0069eb8 Mon Sep 17 00:00:00 2001 From: teastep Date: Tue, 16 Dec 2008 22:33:11 +0000 Subject: [PATCH] Add a little IPv6 Documentation git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9079 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- docs/Documentation_Index.xml | 110 +++++++++++++++++++---------------- docs/FAQ.xml | 8 +++ docs/IPv6Support.xml | 42 ++++++------- 3 files changed, 88 insertions(+), 72 deletions(-) diff --git a/docs/Documentation_Index.xml b/docs/Documentation_Index.xml index f3fcb33d4..2b5690f7d 100644 --- a/docs/Documentation_Index.xml +++ b/docs/Documentation_Index.xml @@ -18,7 +18,7 @@ - 2001-2007 + 2001-2008 Thomas M. Eastep @@ -60,8 +60,8 @@ Limiting per-IPaddress Connection Rate - Scalability and - Performance + Shorewall + Lite @@ -69,8 +69,8 @@ Logging - Shorewall - Lite + Shorewall + Modularization @@ -78,8 +78,8 @@ Macros - Shorewall - Modularization + Shorewall 4.x -- + What's new @@ -89,8 +89,8 @@ MAC Verification - Shorewall 4.x -- - What's new + Shorewall + Perl @@ -99,8 +99,8 @@ Man Pages - Shorewall - Perl + Shorewall Setup + Guide @@ -110,8 +110,7 @@ Manual Chains - Shorewall Setup - Guide + SMB @@ -122,7 +121,9 @@ Masquerading - SMB + SNAT + (Source Network Address + Translation) @@ -133,9 +134,8 @@ from a Single Firewall (Russian) - SNAT - (Source Network Address - Translation) + Split DNS the Easy + Way @@ -145,8 +145,8 @@ Multiple Zones Through One Interface - Split DNS the Easy - Way + Squid with + Shorewall @@ -156,8 +156,9 @@ My Shorewall Configuration - Squid with - Shorewall + Starting/stopping the + Firewall @@ -167,9 +168,8 @@ Netfilter Overview - Starting/stopping the - Firewall + Static (one-to-one) + NAT @@ -178,8 +178,7 @@ Network Mapping - Static (one-to-one) - NAT + Support @@ -188,7 +187,8 @@ One-to-one NAT (Static NAT) - Support + Traffic + Accounting @@ -199,8 +199,9 @@ OpenVPN - Traffic - Accounting + Traffic + Shaping/QOS (Russian) @@ -210,9 +211,8 @@ Operating Shorewall - Traffic - Shaping/QOS (Russian) + Transparent + Proxy @@ -223,8 +223,7 @@ Packet Marking - Transparent - Proxy + UPnP @@ -234,7 +233,8 @@ Packet Processing in a Shorewall-based Firewall - UPnP + Upgrade + Issues @@ -242,8 +242,7 @@ 'Ping' Management - Upgrade - Issues + VPN @@ -253,7 +252,7 @@ Port Forwarding - VPN + VPN Passthrough @@ -262,7 +261,8 @@ Port Information - VPN Passthrough + White List + Creation @@ -271,8 +271,8 @@ Port Knocking and Other Uses of the 'Recent Match' - White List - Creation + Xen - Shorewall in a Bridged Xen + DomU @@ -281,8 +281,8 @@ PPTP - Xen - Shorewall in a Bridged Xen - DomU + Xen - Shorewall in Routed + Xen Dom0 @@ -291,8 +291,7 @@ Proxy ARP - Xen - Shorewall in Routed - Xen Dom0 + @@ -324,8 +323,7 @@ - Kazaa - Filtering + IPv6 Support Routing and Shorewall @@ -334,8 +332,8 @@ - Kernel - Configuration + Kazaa + Filtering Routing on One Interface @@ -343,11 +341,21 @@ + + Kernel + Configuration + + Samba + + + + KVM (Kernel-mode Virtual Machine) - Samba + Scalability and + Performance @@ -355,4 +363,4 @@ - \ No newline at end of file + diff --git a/docs/FAQ.xml b/docs/FAQ.xml index a0778cca9..da04d552c 100644 --- a/docs/FAQ.xml +++ b/docs/FAQ.xml @@ -2176,6 +2176,14 @@ We have an error talking to the kernel url="http://linuxman.wikispaces.com/Clustering+Shorewall">This article by Paul Gear should help you get started. + +
+ (FAQ 80) Does Shorewall support IPV6? + + Answer: Shorewall IPv6 + support is currently available in the development releases. +
diff --git a/docs/IPv6Support.xml b/docs/IPv6Support.xml index b3e85fa2a..0e349ae65 100644 --- a/docs/IPv6Support.xml +++ b/docs/IPv6Support.xml @@ -108,37 +108,37 @@ /etc/shorewall/shorewall.conf. When configuring Shorewall6, you will want to set DISABLE_IPV6=No and restart Shorewall or Shorewall-lite. +
-
- TC_ENABLED +
+ TC_ENABLED - The other area where their configurations overlap is in - traffic shaping; the tcdevices and tcclasses - files do exactly the same thing in both Shorewall and Shorewall6. - Consequently, you will have TC_ENABLED=Internal in Shorewall or in - Shorewall6 and TC_ENABLED=No in the other product. Also, you will - want CLEAR_TC=No in the configuration with TC_ENABLED=No. + The other area where their configurations overlap is in traffic + shaping; the tcdevices and tcclasses files do + exactly the same thing in both Shorewall and Shorewall6. Consequently, + you will have TC_ENABLED=Internal in Shorewall or in Shorewall6 and + TC_ENABLED=No in the other product. Also, you will want CLEAR_TC=No in + the configuration with TC_ENABLED=No. - Regardless of which product has TC_ENABLED=Internal: + Regardless of which product has TC_ENABLED=Internal: - - - IPv4 packet marking is controlled by - /etc/shorewall/tcrules - + + + IPv4 packet marking is controlled by + /etc/shorewall/tcrules + - - IPv6 packet marking is controlled by - /etc/shorewall6/tcrules - - -
+ + IPv6 packet marking is controlled by + /etc/shorewall6/tcrules + +
- Shorewall6 Differences from Shoreawall + Shorewall6 Differences from Shorewall Configuring Shorewall6 is very similar to configuring Shorewall with some notable exceptions: