mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-21 22:01:57 +01:00
Documentation cleanup
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
e14d92c5ac
commit
4a014d4884
@ -250,7 +250,7 @@
|
||||
|
||||
<listitem>
|
||||
<para>At any time, the Netfilter team could begin generating errors
|
||||
when loading those same rules.</para>
|
||||
when loading those same rules (that has happened).</para>
|
||||
</listitem>
|
||||
|
||||
<listitem>
|
||||
|
@ -20,6 +20,8 @@
|
||||
<copyright>
|
||||
<year>2009</year>
|
||||
|
||||
<year>2013</year>
|
||||
|
||||
<holder>Thomas M. Eastep</holder>
|
||||
</copyright>
|
||||
|
||||
@ -45,18 +47,18 @@
|
||||
|
||||
<para>Shorewall provides basic support for defining such zones. This
|
||||
support is based on <ulink
|
||||
url="http://ipset.netfilter.org/">ipset</ulink>. As of this writing, ipset
|
||||
is not included in the standard kernel distribution; so to use dynamic
|
||||
zones, you must be running kernel 2.6.20 or later and have installed the
|
||||
<ulink
|
||||
url="http://xtables-addons.sourceforge.net/">xtables-addons</ulink>.</para>
|
||||
url="http://ipset.netfilter.org/">ipset</ulink>. Most current
|
||||
distributions have ipset, but you may need to install the <ulink
|
||||
url="http://xtables-addons.sourceforge.net/">xtables-addons</ulink>.
|
||||
</para>
|
||||
</section>
|
||||
|
||||
<section id="xtables-addons">
|
||||
<title>Installing xtables-addons</title>
|
||||
|
||||
<para>The xtables-addons are fairly easy to install. You do not need to
|
||||
recompile your kernel.</para>
|
||||
<para>If your distribution does not have an xtables-addons package, the
|
||||
xtables-addons are fairly easy to install. You do not need to recompile
|
||||
your kernel.</para>
|
||||
|
||||
<para><trademark>Debian</trademark> users can find xtables-addons-common
|
||||
and xtables-addons-source packages in <firstterm>testing</firstterm>. The
|
||||
|
@ -860,9 +860,9 @@ iface veth0 inet static
|
||||
</listitem>
|
||||
|
||||
<listitem>
|
||||
<para>It allows up to 8 <replaceable>marked</replaceable> zones
|
||||
(2**3). Zones are marked unless they have <option>nomark</option> in
|
||||
the OPTIONS column of their entry in <ulink
|
||||
<para>It allows up to 7 <replaceable>marked</replaceable> zones (2**3
|
||||
- 1). Zones are marked unless they have <option>nomark</option> in the
|
||||
OPTIONS column of their entry in <ulink
|
||||
url="manpages/shorewall-zones.html">shorewall-zones </ulink>(5).
|
||||
Packets originating in a marked zone have a mark assigned
|
||||
automatically by Shorewall.</para>
|
||||
|
Loading…
Reference in New Issue
Block a user