From 6dfae19e763a675e393511ce4b5d1ae88c7a3e0a Mon Sep 17 00:00:00 2001 From: teastep Date: Sun, 2 Jun 2002 21:29:29 +0000 Subject: [PATCH] Document MULTIPORT in the rules file git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@52 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall/rules | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/Shorewall/rules b/Shorewall/rules index c9a65768d..274648997 100755 --- a/Shorewall/rules +++ b/Shorewall/rules @@ -97,6 +97,14 @@ # In that case, it is suggested that this field contain # "-" # +# If MULTIPORT=Yes in /etc/shorewall/shorewall.conf, then +# only a single Netfilter rule will be generated if in +# this list and the CLIENT PORT(S) list below: +# 1. There are 15 or less ports listed. +# 2. No port ranges are included. +# Otherwise, a separate rule will be generated for each +# port. +# # CLIENT PORT(S) (Optional) Port(s) used by the client. If omitted, # any source port is acceptable. Specified as a comma- # separated list of port names, port numbers or port @@ -106,6 +114,14 @@ # specify an ADDRESS in the next column, then place "-" # in this column. # +# If MULTIPORT=Yes in /etc/shorewall/shorewall.conf, then +# only a single Netfilter rule will be generated if in +# this list and the DEST PORT(S) list above: +# 1. There are 15 or less ports listed. +# 2. No port ranges are included. +# Otherwise, a separate rule will be generated for each +# port. +# # ORIGINAL DEST (0ptional -- only allowed if ACTION is DNAT or # REDIRECT) If included and different from the IP # address given in the SERVER column, this is an address