mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-23 08:03:11 +01:00
Update Traffic Shaping page for column rename
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1764 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
01142a5373
commit
7cf5204bd0
@ -15,7 +15,7 @@
|
|||||||
</author>
|
</author>
|
||||||
</authorgroup>
|
</authorgroup>
|
||||||
|
|
||||||
<pubdate>2004-10-25</pubdate>
|
<pubdate>2004-11-24</pubdate>
|
||||||
|
|
||||||
<copyright>
|
<copyright>
|
||||||
<year>2001-2004</year>
|
<year>2001-2004</year>
|
||||||
@ -310,9 +310,10 @@
|
|||||||
</listitem>
|
</listitem>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>CLIENT PORT(S) - (Optional) Port(s) used by the client. If
|
<para>CLIENT PORT(S) (Renamed SOURCE PORT(S) in Shorewall 2.2.0) -
|
||||||
omitted, any source port is acceptable. Specified as a comma-separate
|
(Optional) Source port(s). If omitted, any source port is acceptable.
|
||||||
list of port names, port numbers or port ranges.</para>
|
Specified as a comma-separate list of port names, port numbers or port
|
||||||
|
ranges.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
@ -333,7 +334,7 @@
|
|||||||
<listitem>
|
<listitem>
|
||||||
<para>TEST (added in Shorewall version 2.2.0). Defines a test on the
|
<para>TEST (added in Shorewall version 2.2.0). Defines a test on the
|
||||||
existing packet or connection mark. The rule will match only if the
|
existing packet or connection mark. The rule will match only if the
|
||||||
test returns true. Tests have the format </para>
|
test returns true. Tests have the format</para>
|
||||||
|
|
||||||
<programlisting>[!]<value>[/<mask>][:C]</programlisting>
|
<programlisting>[!]<value>[/<mask>][:C]</programlisting>
|
||||||
|
|
||||||
@ -361,7 +362,7 @@
|
|||||||
arriving on eth2 and eth3 should be marked with 2. All packets
|
arriving on eth2 and eth3 should be marked with 2. All packets
|
||||||
originating on the firewall itself should be marked with 3.</para>
|
originating on the firewall itself should be marked with 3.</para>
|
||||||
|
|
||||||
<programlisting>#MARK SOURCE DESTINATION PROTOCOL USER/GROUP TEST
|
<programlisting>#MARK SOURCE DESTINATION PROTO PORT(S) SOURCE PORT(S) USER/GROUP TEST
|
||||||
1 eth1 0.0.0.0/0 all
|
1 eth1 0.0.0.0/0 all
|
||||||
2 eth2 0.0.0.0/0 all
|
2 eth2 0.0.0.0/0 all
|
||||||
2 eth3 0.0.0.0/0 all
|
2 eth3 0.0.0.0/0 all
|
||||||
@ -374,7 +375,7 @@
|
|||||||
<para>All GRE (protocol 47) packets not originating on the firewall and
|
<para>All GRE (protocol 47) packets not originating on the firewall and
|
||||||
destined for 155.186.235.151 should be marked with 12.</para>
|
destined for 155.186.235.151 should be marked with 12.</para>
|
||||||
|
|
||||||
<programlisting>#MARK SOURCE DESTINATION PROTOCOL USER/GROUP TEST
|
<programlisting>#MARK SOURCE DESTINATION PROTO PORT(S) SOURCE PORT(S) USER/GROUP TEST
|
||||||
12 0.0.0.0/0 155.182.235.151 47</programlisting>
|
12 0.0.0.0/0 155.182.235.151 47</programlisting>
|
||||||
</example>
|
</example>
|
||||||
|
|
||||||
@ -384,7 +385,7 @@
|
|||||||
<para>All SSH packets originating in 192.168.1.0/24 and destined for
|
<para>All SSH packets originating in 192.168.1.0/24 and destined for
|
||||||
155.186.235.151 should be marked with 22.</para>
|
155.186.235.151 should be marked with 22.</para>
|
||||||
|
|
||||||
<programlisting>#MARK SOURCE DESTINATION PROTOCOL USER/GROUP TEST
|
<programlisting>#MARK SOURCE DESTINATION PROTOCOL PORT(S) SOURCE PORT(S) USER/GROUP TEST
|
||||||
22 192.168.1.0/24 155.182.235.151 tcp 22</programlisting>
|
22 192.168.1.0/24 155.182.235.151 tcp 22</programlisting>
|
||||||
</example>
|
</example>
|
||||||
</section>
|
</section>
|
||||||
|
Loading…
Reference in New Issue
Block a user