mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-24 03:31:24 +02:00
Fix a couple of errors in the manpages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9114 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
12e6a41e4a
commit
610875866c
@ -71,8 +71,8 @@
|
|||||||
current mark value to produce a new mark value.</para>
|
current mark value to produce a new mark value.</para>
|
||||||
|
|
||||||
<para>Both "|" and "&" require Extended MARK Target support
|
<para>Both "|" and "&" require Extended MARK Target support
|
||||||
in your kernel and ip6tables; neither may be used with connection
|
in your kernel and ip6tables; neither may be used with
|
||||||
marks (see below).</para>
|
connection marks (see below).</para>
|
||||||
|
|
||||||
<para>May optionally be followed by <emphasis
|
<para>May optionally be followed by <emphasis
|
||||||
role="bold">:P</emphasis>, <emphasis role="bold">:F</emphasis>
|
role="bold">:P</emphasis>, <emphasis role="bold">:F</emphasis>
|
||||||
@ -554,7 +554,7 @@
|
|||||||
<para>Example: Mark all FTP data connections with mark
|
<para>Example: Mark all FTP data connections with mark
|
||||||
4:<programlisting>#MARK/ SOURCE DEST PROTO PORT(S) SOURCE USER TEST LENGTH TOS CONNBYTES HELPER
|
4:<programlisting>#MARK/ SOURCE DEST PROTO PORT(S) SOURCE USER TEST LENGTH TOS CONNBYTES HELPER
|
||||||
#CLASSIFY PORT(S)
|
#CLASSIFY PORT(S)
|
||||||
4 ::/ ::/ TCP - - - - - - - ftp</programlisting></para>
|
4 ::/0 ::/0 TCP - - - - - - - ftp</programlisting></para>
|
||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
</variablelist>
|
</variablelist>
|
||||||
@ -580,12 +580,12 @@
|
|||||||
|
|
||||||
<programlisting> #MARK/ SOURCE DEST PROTO PORT(S) SOURCE USER TEST
|
<programlisting> #MARK/ SOURCE DEST PROTO PORT(S) SOURCE USER TEST
|
||||||
#CLASSIFY PORT(S)
|
#CLASSIFY PORT(S)
|
||||||
1 ::/ ::/ icmp echo-request
|
1 ::/0 ::/0 icmp echo-request
|
||||||
1 ::/ ::/ icmp echo-reply
|
1 ::/0 ::/0 icmp echo-reply
|
||||||
RESTORE ::/ ::/ all - - - 0
|
RESTORE ::/0 ::/0 all - - - 0
|
||||||
CONTINUE ::/ ::/ all - - - !0
|
CONTINUE ::/0 ::/0 all - - - !0
|
||||||
4 ::/ ::/ ipp2p:all
|
4 ::/0 ::/0 ipp2p:all
|
||||||
SAVE ::/ ::/ all - - - !0</programlisting>
|
SAVE ::/0 ::/0 all - - - !0</programlisting>
|
||||||
|
|
||||||
<para>If a packet hasn't been classifed (packet mark is 0), copy the
|
<para>If a packet hasn't been classifed (packet mark is 0), copy the
|
||||||
connection mark to the packet mark. If the packet mark is set, we're
|
connection mark to the packet mark. If the packet mark is set, we're
|
||||||
|
@ -125,7 +125,7 @@
|
|||||||
<listitem>
|
<listitem>
|
||||||
<para>The IP address of the remote tunnel gateway. If the remote
|
<para>The IP address of the remote tunnel gateway. If the remote
|
||||||
gateway has no fixed address (Road Warrior) then specify the gateway
|
gateway has no fixed address (Road Warrior) then specify the gateway
|
||||||
as <emphasis role="bold">0.0.0.0/0</emphasis>. May be specified as a
|
as <emphasis role="bold">::/0</emphasis>. May be specified as a
|
||||||
network address and if your kernel and ip6tables include iprange
|
network address and if your kernel and ip6tables include iprange
|
||||||
match support then IP address ranges are also allowed.</para>
|
match support then IP address ranges are also allowed.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
@ -173,7 +173,7 @@
|
|||||||
"gw" zone is used to represent the remote LapTop</para>
|
"gw" zone is used to represent the remote LapTop</para>
|
||||||
|
|
||||||
<programlisting> #TYPE ZONE GATEWAY GATEWAY ZONES
|
<programlisting> #TYPE ZONE GATEWAY GATEWAY ZONES
|
||||||
ipsec net ::/ gw</programlisting>
|
ipsec net ::/0 gw</programlisting>
|
||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user