extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-21 18:21:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add footnotes for non-Debian users

Browse Source
This commit is contained in:
Tom Eastep 2009-09-14 08:29:49 -07:00
parent f25646d819
commit 8180f45382
1 changed files with 35 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

45
docs/LennyToSqueeze.xml
View File

@ -47,7 +47,8 @@
<note> <note>
<para>Although this article is targeted specifically at Lenny -&gt; <para>Although this article is targeted specifically at Lenny -&gt;
Squeeze upgrades, it should be useful to any Shorewall-shell user Squeeze upgrades, it should be useful to any Shorewall-shell user
upgrading to Shorewall 4.4.x.</para> upgrading to Shorewall 4.4.x. Footnotes are used to flag areas where
non-Debian users may experience different results.</para>
</note> </note>
</section> </section>
@ -55,7 +56,12 @@
<title>Packaging Differences</title> <title>Packaging Differences</title>
<para>The first key difference between Shorewall 4.0 and Shorewall 4.4 is <para>The first key difference between Shorewall 4.0 and Shorewall 4.4 is
in the packaging. In Lenny, there are six Shorewall packages:</para> in the packaging<footnote>
<para>Most distributions use a similar packaging structure. Note,
however, that the 'shorewall' package in Simon Mater's RPMs for
RedHat/Fedora/CentOS is like the Debian shorewall-common
package.</para>
</footnote>. In Lenny, there are six Shorewall packages:</para>
<orderedlist> <orderedlist>
<listitem> <listitem>
@ -151,9 +157,17 @@
Squeeze does not include the shell-based configuration compiler. As a Squeeze does not include the shell-based configuration compiler. As a
consequence, unless you are already using Shorewall-perl on Lenny, an consequence, unless you are already using Shorewall-perl on Lenny, an
upgrade from Lenny to Squeeze will mean that you will be switching from upgrade from Lenny to Squeeze will mean that you will be switching from
the old shell-based compiler to the new Perl-based compiler. While the two the old shell-based compiler to the new Perl-based compiler<footnote>
compilers are highly compatible, there are some differences. Those <para>Note that Perl is a required package on Debian. If you are
differences are detailed in the following sections.</para> running an embedded distribution which does not include Perl and it is
not feasible to install Perl on your firewall, then you should
consider installing Shorewall on another system in your network (may
be a <trademark>Windows</trademark> system running
<trademark>Cygwin</trademark>) and installing Shorewall-lite on your
firewall.</para>
</footnote>. While the two compilers are highly compatible, there are
some differences. Those differences are detailed in the following
sections.</para>
</section> </section>
<section> <section>
@ -206,10 +220,17 @@
by Shorewall 4.4.x</emphasis></para> by Shorewall 4.4.x</emphasis></para>
<para>You should not be receiving this error if you are upgrading <para>You should not be receiving this error if you are upgrading
from Lenny since BRIDGING=Yes did not work in that release. If you from Lenny since BRIDGING=Yes did not work in that
have a bridge configuration where you want to control connections release<footnote>
through the bridge, you will want to visit <ulink <para>If you are upgrading from a release using a kernel
url="http://www.shorewall.net/bridge-Shorewall-perl.html">http://www.shorewall.net/bridge-Shorewall-perl.html</ulink>.</para> earlier than 2.6.20, then BRIDGING=Yes did work correctly with
Shorewall-shell.</para>
</footnote>. If you have a bridge configuration where you want
to control connections through the bridge, you will want to visit
<ulink
url="http://www.shorewall.net/bridge-Shorewall-perl.html">http://www.shorewall.net/bridge-Shorewall-perl.html</ulink><footnote>
<para>Kernel 2.6.20 or later is required.</para>
</footnote>.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -450,7 +471,11 @@ ipsec2 ipv4</programlisting>
<para>The BROADCAST column is essentially unused in Squeeze. If it <para>The BROADCAST column is essentially unused in Squeeze. If it
contains anything except 'detect' or '-', then you will receive this contains anything except 'detect' or '-', then you will receive this
warning:</para> warning<footnote>
<para>Users whose kernel and/or iptables do not include Address Type
Match Support can continue to list broadcast addresses in this
column; no warning will be issued.</para>
</footnote>:</para>
<blockquote> <blockquote>
<para><emphasis role="bold">WARNING: Shorewall no longer uses <para><emphasis role="bold">WARNING: Shorewall no longer uses