extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-23 06:38:53 +01:00
Code Issues Packages Projects Releases Wiki Activity

Renumber FAQ 87

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-01-19 10:43:56 -08:00
parent 8b50966f80
commit 61a0e85410
1 changed files with 18 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
docs/FAQ.xml
View File

@ -2029,6 +2029,22 @@ shorewall status &gt; /dev/null 2&gt;&amp;1 || shorewall start # Start Shorewall
</listitem> </listitem>
</itemizedlist> </itemizedlist>
</section> </section>
<section id="faq87">
<title>(FAQ 87) My firewall starts and restarts fine but if I try
'shorewall restore', the script fails because none of my shell variables
from /etc/shorewall/params are set. Why?</title>
<para><emphasis role="bold">Answer</emphasis>: You probably need to set
EXPORTPARAMS=Yes. During <emphasis role="bold">start</emphasis> and
<emphasis role="bold">restart</emphasis>,
<filename>/etc/shorewall/params</filename> is processed by the shell
after <emphasis role="bold">set -a</emphasis>; as a result, all param
settings become part of the shell's environment and are inherited by the
running script. The shell does not process
<filename>/etc/shorewall/params</filename> when processing the <emphasis
role="bold">restore</emphasis> command.</para>
</section>
</section> </section>
<section id="MultiISP"> <section id="MultiISP">
@ -2660,8 +2676,8 @@ loc $FW ACCEPT </programlisting>
policies.</para> policies.</para>
</section> </section>
<section id="faq87"> <section id="faq88">
<title>(FAQ 87) Can I run Snort with Shorewall?</title> <title>(FAQ 88) Can I run Snort with Shorewall?</title>
<para><emphasis role="bold">Answer</emphasis>: Yes. In <emphasis>Network <para><emphasis role="bold">Answer</emphasis>: Yes. In <emphasis>Network
Intrusion Detection System (NIDS) mode</emphasis>, Snort is libpcap Intrusion Detection System (NIDS) mode</emphasis>, Snort is libpcap