From 43543b5c32dccad6e450c001898a2162b6a9416e Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Sun, 10 Jun 2018 12:00:54 -0700 Subject: [PATCH] Clean up shorewall-addresses(5) Signed-off-by: Tom Eastep --- Shorewall/manpages/shorewall-addresses.xml | 36 +++++++--------------- 1 file changed, 11 insertions(+), 25 deletions(-) diff --git a/Shorewall/manpages/shorewall-addresses.xml b/Shorewall/manpages/shorewall-addresses.xml index 2dbf8c837..58cf39faf 100644 --- a/Shorewall/manpages/shorewall-addresses.xml +++ b/Shorewall/manpages/shorewall-addresses.xml @@ -28,7 +28,7 @@ Host Address - This address type refer to a single host. + This address type refers to a single host. In IPv4, the format is i.j.k.l where i through l are decimal @@ -77,7 +77,7 @@ [2001:227:e857:1::1] - [2001:227:e857:1:0:0:0:0:1]/64 + [2001:227:e857:1::]/64 @@ -158,14 +158,13 @@ The primary IP address of eth0 in the $FW zone - $FW:&eth0 (see Run-time Address Variables below) + role="bold">$FW:&eth0 All hosts in Vatican City - net:^VA (Shorwall 4.5.4 and later - See this article). + role="bold">net:^VA (Requires the GeoIP + Match capability). @@ -173,26 +172,13 @@ IP Address Ranges - If you kernel and iptables have iprange match support, you may use - IP address ranges in Shorewall configuration file entries; IP address - ranges have the syntax <low IP - address>-<high IP address>. - Example: 192.168.1.5-192.168.1.12. + If you kernel and iptables have IP Range match + support, you may use IP address ranges in Shorewall + configuration file entries; IP address ranges have the syntax + <low IP address>-<high IP + address>. - To see if your kernel and iptables have the required support, use - the shorewall show capabilities command: - - >~ shorewall show capabilities -... -Shorewall has detected the following iptables/netfilter capabilities: - NAT: Available - Packet Mangling: Available - Multi-port Match: Available - Connection Tracking Match: Available - Packet Type Match: Not available - Policy Match: Available - Physdev Match: Available - IP range Match: Available <-------------- + Example: 192.168.1.5-192.168.1.12.