From 5c9c9d97fd75d23ff833d54de2dca2a532f58f8a Mon Sep 17 00:00:00 2001 From: teastep Date: Mon, 5 Jan 2004 15:50:12 +0000 Subject: [PATCH] More standards work git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1058 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall-docs/FTP.xml | 6 +-- .../starting_and_stopping_shorewall.xml | 44 ++++++++++--------- 2 files changed, 27 insertions(+), 23 deletions(-) diff --git a/Shorewall-docs/FTP.xml b/Shorewall-docs/FTP.xml index bc104ce82..40a09696b 100644 --- a/Shorewall-docs/FTP.xml +++ b/Shorewall-docs/FTP.xml @@ -49,7 +49,7 @@ and at a root shell prompt: - shorewall restart + shorewall restart @@ -207,7 +207,7 @@ ftp> command. The <kernel-version> may be obtained by typing - uname -r + uname -r @@ -292,7 +292,7 @@ options ip_nat_ftp ports=21,49 Once you have made these changes to /etc/shorewall/modules and/or /etc/modules.conf, you must either:Unload - the modules and restart shorewall:rmmod ip_nat_ftp; rmmod ip_conntrack_ftp; shorewall restartReboot + the modules and restart shorewall:rmmod ip_nat_ftp; rmmod ip_conntrack_ftp; shorewall restartReboot One problem that I see occasionally involves active mode and the FTP diff --git a/Shorewall-docs/starting_and_stopping_shorewall.xml b/Shorewall-docs/starting_and_stopping_shorewall.xml index bc4870d34..9ce640a6c 100755 --- a/Shorewall-docs/starting_and_stopping_shorewall.xml +++ b/Shorewall-docs/starting_and_stopping_shorewall.xml @@ -15,10 +15,10 @@ - 2003-12-29 + 2004-01-04 - 2001-2003 + 2001-2004 Thomas M. Eastep @@ -48,8 +48,9 @@ Shorewall startup is disabled by default. Once you have configured your firewall, you can enable startup by removing the - file /etc/shorewall/startup_disabled. Note: Users of the .deb - package must edit /etc/default/shorewall and set startup=1. + file /etc/shorewall/startup_disabled. Note: + Users of the .deb package must edit /etc/default/shorewall + and set startup=1. @@ -80,15 +81,16 @@ shorewall stop - stops the firewall; the only traffic permitted through the firewall is from systems listed in - /etc/shorewall/routestopped (Beginning with version 1.4.7, if - ADMINISABSENTMINDED=Yes in /etc/shorewall/shorewall.conf then in - addition, all existing connections are permitted and any new + /etc/shorewall/routestopped (Beginning with + version 1.4.7, if ADMINISABSENTMINDED=Yes in /etc/shorewall/shorewall.conf + then in addition, all existing connections are permitted and any new connections originating from the firewall itself are allowed). - shorewall restart - stops the firewall (if - it's running) and then starts it again + shorewall restart - stops the firewall (if it + is in the Started state) and then + starts it again @@ -127,20 +129,20 @@ shorewall show <chain1> [ <chain2> ... - ] - produce a verbose report about the listed chains - (iptables -L chain -n -v) Note: You may only list one chain in the + ] - produce a verbose report about the listed chains (iptables + -L chain -n -v) Note: You may only list one chain in the show command when running Shorewall version 1.4.6 and earlier. Version 1.4.7 and later allow you to list multiple chains in one command. shorewall show nat - produce a verbose report - about the nat table (iptables -t nat -L -n -v) + about the nat table (iptables -t nat -L -n -v) shorewall show tos - produce a verbose report - about the mangle table (iptables -t mangle -L -n -v) + about the mangle table (iptables -t mangle -L -n -v) @@ -168,8 +170,8 @@ shorewall hits - Produces several reports - about the Shorewall packet log messages in the current - /var/log/messages file. + about the Shorewall packet log messages in the current log file named + in the LOGFILE variable in /etc/shorewall/shorewall.conf. @@ -289,12 +291,13 @@ shorewall try <configuration-directory> If a <configuration-directory> is - specified, each time that Shorewall is going to use a file in - /etc/shorewall it will first look in the + specified, each time that Shorewall is going to use a file in /etc/shorewall it will first look in the <configuration-directory> . If the file is present in the <configuration-directory>, that file will - be used; otherwise, the file in /etc/shorewall will be used. When changing - the configuration of a production firewall, I recommend the following: + be used; otherwise, the file in /etc/shorewall + will be used. When changing the configuration of a production firewall, I + recommend the following: @@ -461,7 +464,8 @@ Revision History - 1.22003-12-31TEAdded + 1.3-1.82004-01-04TEDocbook + standards1.22003-12-31TEAdded clarification about "Started State"1.12003-12-29TEInitial Docbook conversion