Document new 'trace' facility

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-03-28 14:37:22 -07:00
parent b0733d93ee
commit 3b07053d3b
2 changed files with 16 additions and 0 deletions

View File

@ -5,6 +5,8 @@ Changes in Shorewall 4.4.9
2) Correct handling of a logical interface name in the EXTERNAL column 2) Correct handling of a logical interface name in the EXTERNAL column
of proxyarp. of proxyarp.
3) More robust 'trace'.
Changes in Shorewall 4.4.8 Changes in Shorewall 4.4.8
1) Correct handling of RATE LIMIT on NAT rules. 1) Correct handling of RATE LIMIT on NAT rules.

View File

@ -239,6 +239,20 @@ None.
for export (-e option); note that -e is implicit in the 'load' and for export (-e option); note that -e is implicit in the 'load' and
'reload' commands. 'reload' commands.
2) When 'trace' is specified on a command that involves the compiler,
the compiler now creates a trace to standard output.
Trace entries are of three types:
Input --- begin with IN===>. Input read from configuration
files.
Output --- begin with CS----->. Text written to the generated
script.
Netfilter -- begin with NF----->. Updates to the compiler's chain
table.
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
V I. P R O B L E M S C O R R E C T E D A N D N E W F E A T U R E S V I. P R O B L E M S C O R R E C T E D A N D N E W F E A T U R E S
I N P R I O R R E L E A S E S I N P R I O R R E L E A S E S