From 422911f06b0cb0713db279c0c81ffad168775472 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Fri, 9 Feb 2018 17:09:11 -0800 Subject: [PATCH] Update config file basics doc to discourage INLINE_MATCHES=Yes Signed-off-by: Tom Eastep --- docs/configuration_file_basics.xml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/configuration_file_basics.xml b/docs/configuration_file_basics.xml index 52965b11a..4b6b33a3d 100644 --- a/docs/configuration_file_basics.xml +++ b/docs/configuration_file_basics.xml @@ -854,6 +854,12 @@ INLINE net $FW ; -m recent --rcheck 10 --hitcount 5 - semicolons (";;"). If alternate input is present, the adjacent semicolons should follow that input. + + INLINE_MATCHES=Yes is deprecated and will no longer be + supported in Shorewall 5.2 and beyond. Use two adjacent semicolons + to introduce inline matches. + + Example from the masq file that spits outgoing SNAT between two public IP addresses