Modest update to Packet processing doc

This commit is contained in:
Tom Eastep 2009-04-30 19:11:16 -07:00
parent f693224d93
commit 798dde23c8
2 changed files with 10 additions and 2 deletions

View File

@ -63,6 +63,9 @@ released late in 2009.
interface to be up and configured when Shorewall
starts/restarts
To avoid this warning, replace interface names by the corresponding
network addresses (e.g., 192.168.144.0/24).
----------------------------------------------------------------------------
P R O B L E M S C O R R E C T E D I N 4 . 3 . 10
----------------------------------------------------------------------------

View File

@ -22,6 +22,8 @@
<year>2005</year>
<year>2009</year>
<holder>Thomas M. Eastep</holder>
</copyright>
@ -45,7 +47,7 @@
Overview</ulink> handy to refer to.</para>
<para>The discussion that follows assumes that you are running a current
kernel (2.4.2n or 2.6.m) with the <ulink url="kernel.htm">recommended
kernel (2.6.20 or later) with the <ulink url="kernel.htm">recommended
options </ulink>included. Otherwise processing may be somewhat different
from described below depending on the features supported by your
kernel.</para>
@ -155,7 +157,10 @@
<para>then the packet is ACCEPTed in the <emphasis>filter</emphasis>
table's <emphasis
role="bold"><emphasis>interface</emphasis>_in</emphasis> chain (for
example, eth0_in).</para>
example, eth0_in). Note that if the interface is its associated zones
only interface, then the <emphasis
role="bold"><emphasis>interface</emphasis>_in</emphasis> chain is
optimized away and its rules are transferred to another chain.</para>
</listitem>
<listitem>