Update documentation

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7836 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-12-06 00:40:32 +00:00
parent a64b437a2f
commit 1855f85527
3 changed files with 43 additions and 11 deletions

View File

@ -116,6 +116,19 @@ Other changes in Shorewall 4.1.2.
Those parameters that are supplied must have defined values. Those parameters that are supplied must have defined values.
Defaults are:
object '' ('check' command)
directory ''
verbosity 1
timestamp 0
debug 0
export 0
chains ''
log ''
log_verbosity -1
Example: Example:
use lib '/usr/share/shorewall-perl/'; use lib '/usr/share/shorewall-perl/';
@ -132,7 +145,7 @@ Other changes in Shorewall 4.1.2.
originating on the firewall must be coded in the POSTROUTING table. originating on the firewall must be coded in the POSTROUTING table.
3) Previously, Shorewall did not range-check the value of the 3) Previously, Shorewall did not range-check the value of the
VERBOSITY option in shorewall.conf. Beginnins with Shorewall 4.1.2: VERBOSITY option in shorewall.conf. Beginning with Shorewall 4.1.2:
a) A VERBOSITY setting outside the range -1 through 2 is rejected. a) A VERBOSITY setting outside the range -1 through 2 is rejected.
b) After the -v and -q options are applied, the resulting value is b) After the -v and -q options are applied, the resulting value is

View File

@ -615,12 +615,12 @@ loc net ACCEPT</programlisting>
<title>/usr/share/shorewall-perl/compiler.pl</title> <title>/usr/share/shorewall-perl/compiler.pl</title>
<para>While the compiler is normally run indirectly using <para>While the compiler is normally run indirectly using
/sbin/shorewall, it can be run directly as well.<programlisting><command>compiler.pl</command> [ &lt;<emphasis>option</emphasis>&gt; ... ] [ &lt;<emphasis>filename</emphasis>&gt; ]</programlisting></para> /sbin/shorewall, it can be run directly as well.<programlisting><command>compiler.pl</command> [ <emphasis>option</emphasis> ... ] [ <emphasis>filename</emphasis> ]</programlisting></para>
<para>If a &lt;<emphasis>filename</emphasis>&gt; is given, then the <para>If a <emphasis>filename</emphasis> is given, then the
configuration will be compiled output placed in the named file. If configuration will be compiled and the output placed in the named file.
&lt;<emphasis>filename</emphasis>&gt; is not given, then the If <emphasis>filename</emphasis> is not given, then the configuration
configuration will simply be syntax checked.</para> will simply be syntax checked.</para>
<para>Options are:</para> <para>Options are:</para>
@ -631,7 +631,11 @@ loc net ACCEPT</programlisting>
</simplelist>The &lt;<emphasis>verbosity</emphasis>&gt; is a number </simplelist>The &lt;<emphasis>verbosity</emphasis>&gt; is a number
between 0 and 2 and corresponds to the VERBOSITY setting in between 0 and 2 and corresponds to the VERBOSITY setting in
<filename>shorewall.conf</filename>. This setting controls the verbosity <filename>shorewall.conf</filename>. This setting controls the verbosity
of the compiler itself.<simplelist> of the compiler itself.<note>
<para>The VERBOSITY setting in the
<filename>shorewall.conf</filename> file read by the compiler will
determine the default verbosity for the compiled program.</para>
</note><simplelist>
<member><emphasis role="bold">-e</emphasis></member> <member><emphasis role="bold">-e</emphasis></member>
<member><emphasis role="bold">--export</emphasis></member> <member><emphasis role="bold">--export</emphasis></member>
@ -662,7 +666,16 @@ loc net ACCEPT</programlisting>
<para>Example (compiles the configuration in the current directory <para>Example (compiles the configuration in the current directory
generating a script named 'firewall' and using VERBOSITY generating a script named 'firewall' and using VERBOSITY
2).<programlisting><emphasis role="bold">/usr/share/shorewall-perl/compiler.pl -v 2 -d . firewall</emphasis></programlisting></para> 2).<programlisting><emphasis role="bold">/usr/share/shorewall-perl/compiler.pl -v 2 -d . firewall</emphasis></programlisting><note>
<para>The Perl-based compiler does not process
<filename>/etc/shorewall/params</filename>. To include definitions
in that file, you would need to do something like the
following:<programlisting><command>. /usr/share/shorewall/lib.base # In case /etc/shorewall/params does INCLUDE
set -a # Export all variables set in /etc/shorewall/params
. /etc/shorewall/params
set +a
/usr/share/shorewall-perl/compiler.pl ...</command></programlisting></para>
</note></para>
</section> </section>
<section id="Compiler"> <section id="Compiler">
@ -698,7 +711,13 @@ loc net ACCEPT</programlisting>
<term>$verbose</term> <term>$verbose</term>
<listitem> <listitem>
<para>The verbosity level (0-2).</para> <para>The verbosity level that the compiler will run with
(0-2).<note>
<para>The VERBOSITY setting in the
<filename>shorewall.conf</filename> file read by the compiler
will determine the default verbosity for the compiled
program.</para>
</note></para>
</listitem> </listitem>
</varlistentry> </varlistentry>

View File

@ -21,7 +21,7 @@ Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the
license is included in the section entitled “<a href="GnuCopyright.htm" license is included in the section entitled “<a href="GnuCopyright.htm"
target="_self">GNU Free Documentation License</a>”.</p> target="_self">GNU Free Documentation License</a>”.</p>
<p>2007-11-26</p> <p>2007-12-05</p>
<hr style="width: 100%; height: 2px;"> <hr style="width: 100%; height: 2px;">
<h2>Table of Contents</h2> <h2>Table of Contents</h2>
@ -228,7 +228,7 @@ root@wookie:/usr/share/shorewall#</pre>
4.0.0-4.0.5 can cause improper handing of PREROUTING and OUTPUT marks when 4.0.0-4.0.5 can cause improper handing of PREROUTING and OUTPUT marks when
HIGH_ROUTE_MARKS=Yes. Patches are also available to correct this problem:</p> HIGH_ROUTE_MARKS=Yes. Patches are also available to correct this problem:</p>
<p>Shorewall version 3.2.3-3.2.10, 3.4.0-3.4.7: <a <p>Shorewall version 3.2.3-3.2.11: <a
href="http://www1.shorewall.net/pub/shorewall/3.2/shorewall-3.2.11/errata/patches/Shorewall/patch-3.2.11-1.diff">http://www1.shorewall.net/pub/shorewall/3.2/shorewall-3.2.11/errata/patches/Shorewall/patch-3.2.11-1.diff</a></p> href="http://www1.shorewall.net/pub/shorewall/3.2/shorewall-3.2.11/errata/patches/Shorewall/patch-3.2.11-1.diff">http://www1.shorewall.net/pub/shorewall/3.2/shorewall-3.2.11/errata/patches/Shorewall/patch-3.2.11-1.diff</a></p>
<p>Shorewall version 3.4.0-3.4.7: <a <p>Shorewall version 3.4.0-3.4.7: <a