diff --git a/docs/configuration_file_basics.xml b/docs/configuration_file_basics.xml index b6afb7ead..45e2f621f 100644 --- a/docs/configuration_file_basics.xml +++ b/docs/configuration_file_basics.xml @@ -852,8 +852,9 @@ DNAT net loc:192.168.1.3 tcp 4000:4100
Using Shell Variables - You may use the /etc/shorewall/params file to set shell variables - that you can then use in some of the other configuration files. + You may use the /etc/shorewall/params file to + set shell variables that you can then use in some of the other + configuration files. It is suggested that variable names begin with an upper case letter to distinguish them from variables used internally within the Shorewall @@ -879,7 +880,21 @@ DNAT net loc:192.168.1.3 tcp 4000:4100 Variables may be used anywhere in the other configuration - files. + files. + Shorewall-perl users: If you use "$FW" on the right side of + assignments in the /etc/shorewall/params file, + you must also set the FW variable in that file. + + Example:/etc/shorewall/zones: + + #ZONE TYPE OPTIONS + fw firewall + +/etc/shorewall/params: + + FW=fw + BLARG=$FW:206.124.146.176 + Because the /etc/shorewall/params file is simply sourced into the shell, you can place arbitrary shell code in the