From 4098535a435566e71e7aa863a9cebef04d288623 Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Sun, 23 Jan 2011 12:47:13 -0800
Subject: [PATCH] Revise info about mis-using Vserver zones

---
 docs/Shorewall_and_Aliased_Interfaces.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/Shorewall_and_Aliased_Interfaces.xml b/docs/Shorewall_and_Aliased_Interfaces.xml
index 2a0efd52c..3ccdf2dc2 100644
--- a/docs/Shorewall_and_Aliased_Interfaces.xml
+++ b/docs/Shorewall_and_Aliased_Interfaces.xml
@@ -345,8 +345,8 @@ loc2         eth1:192.168.20.0/24</programlisting>
       <para><ulink url="Vserver.html">Shorewall's support for Linux
       Vservers</ulink> can (mis-)used to create a separate zone per alias.
       Note that this results in a <emphasis>partitioning of the firewall
-      zone</emphasis>. Be sure that you define an ACCEPT policy between your
-      vserver zones and $FW.</para>
+      zone</emphasis>. In this usage, you probably want to define an ACCEPT
+      policy between your vserver zones and the firewall zone.</para>
     </section>
   </section>
 </article>