mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-24 19:51:40 +02:00
fixed quotes
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@950 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
8066bd076c
commit
836325457e
@ -26,8 +26,8 @@
|
||||
document under the terms of the GNU Free Documentation License, Version
|
||||
1.2 or any later version published by the Free Software Foundation; with
|
||||
no Invariant Sections, with no Front-Cover, and with no Back-Cover
|
||||
Texts. A copy of the license is included in the section entitled "<ulink
|
||||
url="GnuCopyright.htm">GNU Free Documentation License</ulink>".</para>
|
||||
Texts. A copy of the license is included in the section entitled
|
||||
<quote><ulink url="GnuCopyright.htm">GNU Free Documentation License</ulink></quote>.</para>
|
||||
</legalnotice>
|
||||
</articleinfo>
|
||||
|
||||
@ -51,7 +51,7 @@
|
||||
</listitem>
|
||||
|
||||
<listitem>
|
||||
<para>Install the Mandrake "cooker" version of Shorewall.</para>
|
||||
<para>Install the Mandrake <quote>cooker</quote> version of Shorewall.</para>
|
||||
</listitem>
|
||||
|
||||
<listitem>
|
||||
@ -67,10 +67,10 @@
|
||||
role="bold">control</emphasis> connection goes from the FTP client to port
|
||||
21 on the FTP server. This connection is used for logon and to send
|
||||
commands and responses between the endpoints. Data transfers (including
|
||||
the output of "ls" and "dir" commands) requires a second
|
||||
data connection. The <emphasis role="bold">data</emphasis> connection is
|
||||
dependent on the <emphasis role="bold">mode</emphasis> that the client is
|
||||
operating in:</para>
|
||||
the output of <quote>ls</quote> and <quote>dir</quote> commands) requires
|
||||
a second data connection. The <emphasis role="bold">data</emphasis>
|
||||
connection is dependent on the <emphasis role="bold">mode</emphasis> that
|
||||
the client is operating in:</para>
|
||||
|
||||
<variablelist>
|
||||
<varlistentry>
|
||||
@ -104,7 +104,7 @@
|
||||
<para>You can see these commands in action using your linux ftp
|
||||
command-line client in debugging mode. Note that my ftp client defaults to
|
||||
passive mode and that I can toggle between passive and active mode by
|
||||
issuing a "passive" command:</para>
|
||||
issuing a <quote>passive</quote> command:</para>
|
||||
|
||||
<programlisting>[teastep@wookie Shorewall]$ <emphasis role="bold">ftp ftp1.shorewall.net</emphasis>
|
||||
Connected to lists.shorewall.net.
|
||||
@ -185,10 +185,10 @@ ftp></programlisting>
|
||||
|
||||
<para>Given the normal loc->net policy of ACCEPT, passive mode access
|
||||
from local clients to remote servers will always work but active mode
|
||||
requires the firewall to dynamically open a "hole" for the
|
||||
requires the firewall to dynamically open a <quote>hole</quote> for the
|
||||
server's connection back to the client. Similarly, if you are running
|
||||
an FTP server in your local zone then active mode should always work but
|
||||
passive mode requires the firewall to dynamically open a "hole"
|
||||
passive mode requires the firewall to dynamically open a <quote>hole</quote>
|
||||
for the client's second connection to the server. This is the role of
|
||||
FTP connection-tracking support in the Linux kernel.</para>
|
||||
|
||||
@ -198,9 +198,9 @@ ftp></programlisting>
|
||||
function.</para>
|
||||
|
||||
<para>Including FTP connection-tracking and NAT support normally means
|
||||
that the modules "ip_conntrack_ftp" and "ip_nat_ftp" need
|
||||
to be loaded. Shorewall automatically loads these "helper" modules
|
||||
from /lib/modules/<<emphasis>kernel-version</emphasis>>/kernel/net/ipv4/netfilter/
|
||||
that the modules <quote>ip_conntrack_ftp</quote> and <quote>ip_nat_ftp</quote>
|
||||
need to be loaded. Shorewall automatically loads these <quote>helper</quote>
|
||||
modules from /lib/modules/<<emphasis>kernel-version</emphasis>>/kernel/net/ipv4/netfilter/
|
||||
and you can determine if they are loaded using the 'lsmod'
|
||||
command. The <<emphasis>kernel-version</emphasis>> may be obtained
|
||||
by typing</para>
|
||||
|
Loading…
x
Reference in New Issue
Block a user