diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index a8dc7cf10..1c1b28484 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -1842,6 +1842,17 @@ ERROR: Command "ip -4 rule add from all table 254 pref 999" Failed
Starting and Stopping
+
+ (FAQ 94) After I start Shorewall, ps doesn't show any shorewall
+ process running. What is the Shorewall daemon called?
+
+ Answer: Shorewall is not a
+ daemon. It is a configuration tool that configures your kernel based on
+ the contents of /etc/shorewall/. Once the
+ start command completes, Shorewall has done its job
+ and there are no Shorewall processes remaining in the system.
+
+
(FAQ 7) When I stop Shorewall using shorewall[-lite]
stop
, I can't connect to anything. Why doesn't that command
diff --git a/docs/configuration_file_basics.xml b/docs/configuration_file_basics.xml
index 039777582..45739d8c1 100644
--- a/docs/configuration_file_basics.xml
+++ b/docs/configuration_file_basics.xml
@@ -503,17 +503,17 @@ ACCEPT net:\
Host Address
- This address type refer to a single host.
+ This address type refer to a single host.
In IPv4, the format is i.j.k.l where
i through l are decimal
- numbers between 1 and 255.
+ numbers between 1 and 255.
In IPv6, the format is a:b:c:d:e:f:g:h
where a through h consist
- of 1 to 4 hexidecimal digits. a single series of 0 addresses may be
- omitted. For example 2001:0;0;0;0;0;0;0;1 may be written
- 2001::1.
+ of 1 to 4 hexidecimal digits (leading zeros may be omitted). a
+ single series of 0 addresses may be omitted. For example
+ 2001:227:e857:1:0:0:0:0:1 may be written 2001:227:e857:1::1.
@@ -523,15 +523,30 @@ ACCEPT net:\
A network address refers to 1 or more hosts and consists of a
host address followed by a slash ("/") and a Variable
- Length Subnet Mask (VLSM). The VLSM is a decimal number.
- For IPv4, it is in the range 0 through 32. For IPv6, the range is 0
- through 128.
+ Length Subnet Mask (VLSM). This is known as
+ Classless Internet Domain Routing (CIDR)
+ notation.
+
+ The VLSM is a decimal number. For IPv4, it is in the range 0
+ through 32. For IPv6, the range is 0 through 128. The number
+ represents the number of leading bits in the address that represent
+ the network address; the remainder of the bits are a host address
+ and are generally given as zero.
+
+ Examples:
+
+ IPv4: 192.168.1.0/24
+
+ IPv6: 2001:227:e857:1:0:0:0:0:1/64
In the Shorewall documentation and manpages, we have tried to make
it clear which type of address is accepted in each specific case.
+
+ For more information about addressing, see the Setup Guide.