mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-21 02:08:48 +02:00
Document 'comment' in the alternate input format
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
bb8af36d3f
commit
3954636fb5
@ -774,6 +774,17 @@ DNAT net loc:10.0.0.1 tcp 80 ; mark="88"</pro
|
|||||||
<programlisting>{ action=>DNAT, source=>net, dest=>loc:10.0.0.1, proto=>tcp, dport=>80, mark=>88 }
|
<programlisting>{ action=>DNAT, source=>net, dest=>loc:10.0.0.1, proto=>tcp, dport=>80, mark=>88 }
|
||||||
; action:"DNAT" source:"net" dest:"loc:10.0.0.1" proto:"tcp" dport:"80" mark:"88"
|
; action:"DNAT" source:"net" dest:"loc:10.0.0.1" proto:"tcp" dport:"80" mark:"88"
|
||||||
DNAT { source=net dest=loc:10.0.0.1 proto=tcp dport=80 mark=88 }</programlisting>
|
DNAT { source=net dest=loc:10.0.0.1 proto=tcp dport=80 mark=88 }</programlisting>
|
||||||
|
|
||||||
|
<para>Beginning with Shorewall 5.0.11, ip[6]table comments can be attached
|
||||||
|
to individual rules using the <option>comment</option> keyword.</para>
|
||||||
|
|
||||||
|
<para>Example from the rules file:</para>
|
||||||
|
|
||||||
|
<programlisting> ACCEPT net $FW { proto=tcp, dport=22, comment="Accept \"SSH\"" }</programlisting>
|
||||||
|
|
||||||
|
<para> As shown in that example, when the comment contains whitespace, it
|
||||||
|
must be enclosed in double quotes and any embedded double quotes must be
|
||||||
|
escaped using a backslash ("\").</para>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
<section>
|
<section>
|
||||||
@ -1371,6 +1382,10 @@ SSH(ACCEPT) net:$MYIP $FW
|
|||||||
?COMMENT line in the rules file and the generated rule will show <emphasis
|
?COMMENT line in the rules file and the generated rule will show <emphasis
|
||||||
role="bold">/* Allow SSH from home */</emphasis> when displayed through
|
role="bold">/* Allow SSH from home */</emphasis> when displayed through
|
||||||
the Shorewall show and dump commands.</para>
|
the Shorewall show and dump commands.</para>
|
||||||
|
|
||||||
|
<para>Beginning with Shorewall 5.0.11, the <link linkend="Pairs">alternate
|
||||||
|
input format </link>allows attaching comments to individual rules in the
|
||||||
|
files listed above.</para>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
<section id="CONFIG_PATH">
|
<section id="CONFIG_PATH">
|
||||||
|
Loading…
x
Reference in New Issue
Block a user