From 738bb4c48f942d723b83ef461de78aaddf588a8c Mon Sep 17 00:00:00 2001 From: teastep Date: Tue, 5 Dec 2006 18:59:43 +0000 Subject: [PATCH] Add examples of where 'critical' might be used git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5057 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- manpages/shorewall-routestopped.xml | 37 ++++++++++++++++++++--------- 1 file changed, 26 insertions(+), 11 deletions(-) diff --git a/manpages/shorewall-routestopped.xml b/manpages/shorewall-routestopped.xml index 2a2d044cb..5a4657d71 100644 --- a/manpages/shorewall-routestopped.xml +++ b/manpages/shorewall-routestopped.xml @@ -30,7 +30,7 @@ - INTERFACE — + INTERFACEinterface @@ -40,8 +40,8 @@ - HOST(S) (Optional) — {-|address[,address]...} + HOST(S) (Optional) — [-|address[,address]...] Comma-separated list of IP/subnet addresses. If your kernel @@ -107,20 +107,35 @@ throughout '[re]start', 'stop' and 'clear'. Specifying critical on one or more entries will cause your firewall to be "totally open" for a - brief window during each of those operations. + brief window during each of those operations. Examples of + where you might want to use this are: + + + + 'Ping' nodes with heartbeat. + + + + LDAP server(s) if you use LDAP Authentication + + + + NFS Server if you have an NFS-mounted root + filesystem. + + - - - The source and dest options work best when used in - conjunction with ADMINISABSENTMINDED=Yes in - shorewall.conf(5). - + + + The source and dest options work best when used in conjunction + with ADMINISABSENTMINDED=Yes in shorewall.conf(5). +