mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-22 06:10:42 +01:00
Remove nic registration requirement for IRC channel
This commit is contained in:
parent
1528cc2094
commit
7f4a7372ef
@ -290,6 +290,30 @@ ACCEPT net $FW tcp www #This is an end-of-line comment</progra
|
|||||||
</example>
|
</example>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
|
<section id="Names">
|
||||||
|
<title>Names</title>
|
||||||
|
|
||||||
|
<para>When you define an object in Shorewall (<ulink
|
||||||
|
url="manpages/shorewall-zones.html">Zone</ulink>, <link
|
||||||
|
linkend="Logical">Logical Interface</link>, <ulink
|
||||||
|
url="ipsets.html">ipsets</ulink>, <ulink
|
||||||
|
url="Actions.html">Actions</ulink>, etc., you give it a name. Shorewall
|
||||||
|
names start with a letter and consist of letters, digits or underscores
|
||||||
|
("_"). Except for Zone names, Shorewall does not impose a limit on name
|
||||||
|
length.</para>
|
||||||
|
|
||||||
|
<para>When an ipset is referenced, the name must be preceded by a plus
|
||||||
|
sign ("+").</para>
|
||||||
|
|
||||||
|
<para>The last character of an interface may also be a plus sign to
|
||||||
|
indicate a wildcard name.</para>
|
||||||
|
|
||||||
|
<para>Physical interface names match names shown by 'ip link ls'; if the
|
||||||
|
name includes an at sign ("@"), do not include that character or any
|
||||||
|
character that follows. For example, "sit1@NONE" is referred to as simply
|
||||||
|
'sit1".</para>
|
||||||
|
</section>
|
||||||
|
|
||||||
<section id="COMMENT">
|
<section id="COMMENT">
|
||||||
<title>Attach Comment to Netfilter Rules</title>
|
<title>Attach Comment to Netfilter Rules</title>
|
||||||
|
|
||||||
|
@ -428,9 +428,7 @@ State:Stopped (Thu Mar 30 14:08:11 PDT 2006)</programlisting>
|
|||||||
below).</para>
|
below).</para>
|
||||||
|
|
||||||
<para>For <emphasis role="bold">quick questions</emphasis>, there is also
|
<para>For <emphasis role="bold">quick questions</emphasis>, there is also
|
||||||
a #shorewall channel at irc.freenode.net. <emphasis role="bold">You must
|
a #shorewall channel at irc.freenode.net. </para>
|
||||||
have a registered Nic on freenode in order to post on the
|
|
||||||
channel.</emphasis></para>
|
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
<section id="Users">
|
<section id="Users">
|
||||||
|
@ -1317,7 +1317,7 @@
|
|||||||
<para>Add the tupple (source IP, dest port, dest IP) of an incoming
|
<para>Add the tupple (source IP, dest port, dest IP) of an incoming
|
||||||
SSH connection to the ipset S:</para>
|
SSH connection to the ipset S:</para>
|
||||||
|
|
||||||
<programlisting> ADD(S:dst,src,dst) net fw tcp 22</programlisting>
|
<programlisting> ADD(+S:dst,src,dst) net fw tcp 22</programlisting>
|
||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
</variablelist>
|
</variablelist>
|
||||||
|
@ -38,10 +38,11 @@
|
|||||||
role="bold">,</emphasis><emphasis>parent-zone</emphasis>]...]</term>
|
role="bold">,</emphasis><emphasis>parent-zone</emphasis>]...]</term>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>Name of the <emphasis>zone</emphasis>. The names "all",
|
<para>Name of the <emphasis>zone</emphasis>. Must start with a
|
||||||
"none", "SOURCE" and "DEST" are reserved and may not be used as zone
|
letter and consist of letters, digits or '_'. The names "all",
|
||||||
names. The maximum length of a zone name is determined by the
|
"none", "any", "SOURCE" and "DEST" are reserved and may not be used
|
||||||
setting of the LOGFORMAT option in <ulink
|
as zone names. The maximum length of a zone name is determined by
|
||||||
|
the setting of the LOGFORMAT option in <ulink
|
||||||
url="shorewall.conf.html">shorewall.conf</ulink>(5). With the
|
url="shorewall.conf.html">shorewall.conf</ulink>(5). With the
|
||||||
default LOGFORMAT, zone names can be at most 5 characters
|
default LOGFORMAT, zone names can be at most 5 characters
|
||||||
long.</para>
|
long.</para>
|
||||||
@ -68,7 +69,8 @@
|
|||||||
<listitem>
|
<listitem>
|
||||||
<para>The canonical name for the chain containing the rules
|
<para>The canonical name for the chain containing the rules
|
||||||
for traffic going from zone 1 to zone 2 is "<zone
|
for traffic going from zone 1 to zone 2 is "<zone
|
||||||
1>2<zone 2>".</para>
|
1>2<zone 2>" or "<zone 1>-<zone
|
||||||
|
2>".</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
|
Loading…
Reference in New Issue
Block a user