diff --git a/manpages/shorewall-init.xml b/manpages/shorewall-init.xml index 90e173690..bc62e7005 100644 --- a/manpages/shorewall-init.xml +++ b/manpages/shorewall-init.xml @@ -142,6 +142,13 @@ in the PRODUCTS setting. + + On a laptop with both ethernet and wireless interfaces, you will + want to make both interfaces optional and set the REQUIRE_INTERFACE option + to Yes in shorewall.conf (5) or + shorewall6.conf + (5). This causes the firewall to remain stopped until at least one of the + interfaces comes up. diff --git a/manpages/shorewall.conf.xml b/manpages/shorewall.conf.xml index 720358702..729afded8 100644 --- a/manpages/shorewall.conf.xml +++ b/manpages/shorewall.conf.xml @@ -1370,6 +1370,18 @@ net all DROP infothen the chain name is 'net2all' + + REQUIRE_INTERFACE=[Yes|No] + + + Added in Shorewall 4.4.10. The default is No. If set to Yes, + at least one optional interface must be up in order for the firewall + to be in the started state. Intended to be used with the Shorewall Init Package. + + + RESTORE_DEFAULT_ROUTE=[then the chain name is 'net2all' + + REQUIRE_INTERFACE=[Yes|No] + + + Added in Shorewall 4.4.10. The default is No. If set to Yes, + at least one optional interface must be up in order for the firewall + to be in the started state. Intended to be used with the Shorewall Init + Package. + + + RESTOREFILE=filename