Add additional description to the tunnels file manpage

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5248 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb

manpages/shorewall-accounting.xml

@@ -144,8 +144,8 @@
       </varlistentry>
 
       <varlistentry>
-        <term><emphasis role="bold">DEST PORT(S)</emphasis> — Value:
+        <term><emphasis role="bold">DEST PORT(S)</emphasis> — {<emphasis
-        {<emphasis role="bold">-</emphasis>|<emphasis
+        role="bold">-</emphasis>|<emphasis
         role="bold">any</emphasis>|<emphasis
         role="bold">all</emphasis>|<emphasis>ipp2p-option</emphasis>|<emphasis>port-name-or-number</emphasis>[,<emphasis>port-name-or-number</emphasis>]...}</term>
 

manpages/shorewall-exclusion.xml

@@ -32,14 +32,19 @@
     <emphasis>lowaddress</emphasis>-<emphasis>highaddress</emphasis></para>
 
     <para>No embedded whitespace is allowed.</para>
+
+    <para>Exclusion can appear after a list of addresses and/or address
+    ranges. In that case, the final list of address is formed by taking the
+    first list and then removing the addresses defined in the
+    exclusion.</para>
   </refsect1>
 
   <refsect1>
-    <title>Example</title>
+    <title>Examples</title>
 
     <variablelist>
       <varlistentry>
-        <term>Example 1</term>
+        <term>Example 1 - All IPv4 addresses except 192.168.3.4</term>
 
         <listitem>
           <para>!192.168.3.4</para>
@@ -47,7 +52,8 @@
       </varlistentry>
 
       <varlistentry>
-        <term>Example 2</term>
+        <term>Example 2 - All IPv4 addresses except the network 192.168.1.0/24
+        and the host 10.2.3.4</term>
 
         <listitem>
           <para>!192.168.1.0/24,10.1.3.4</para>
@@ -55,12 +61,22 @@
       </varlistentry>
 
       <varlistentry>
-        <term>Example 3</term>
+        <term>Example 3 - All IPv4 addresses except the range
+        192.168.1.3-192.168.1.12 and the network 10.0.0.0/8</term>
 
         <listitem>
           <para>!192.168.1.3-192.168.1.12,10.0.0.0/8</para>
         </listitem>
       </varlistentry>
+
+      <varlistentry>
+        <term>Example 4 - The network 192.168.1.0/24 except hosts 192.168.1.3
+        and 192.168.1.9</term>
+
+        <listitem>
+          <para>192.168.1.0/24!192.168.1.3,192.168.1.9</para>
+        </listitem>
+      </varlistentry>
     </variablelist>
   </refsect1>
 

manpages/shorewall-tunnels.xml

@@ -21,6 +21,13 @@
   <refsect1>
     <title>Description</title>
 
+    <para>The tunnels file is used to define rules for encapsulated (usually
+    encrypted) traffic to pass between the Shorewall system and a remote
+    gateway. Traffic flowing through the tunnel is handled using the normal
+    zone/policy/rule mechanism. See <ulink
+    url="http://www.shorewall.net/VPNBasics.html">http://www.shorewall.net/VPNBasics.html</ulink>
+    for details.</para>
+
     <para>The columns in the file are as follows.</para>
 
     <variablelist>