Document 'HELPERS=none'.

- Also make 'check -u' work correctly regarding HELPERS=

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-04-18 11:30:47 -07:00
parent 4d686e873b
commit 8ef11a376b
3 changed files with 42 additions and 22 deletions

View File

@ -5029,10 +5029,10 @@ sub get_configuration( $$$$ ) {
if ( supplied ( $val = $config{HELPERS} ) ) {
if ( $val eq 'none' ) {
$val = $config{HELPERS} = '';
$val = '';
}
} else {
$val = $config{HELPERS} = join( ',', grep $_ !~ /-0$/, keys %helpers_enabled );
$val = join( ',', grep $_ !~ /-0$/, keys %helpers_enabled );
$all = 1;
}

View File

@ -811,43 +811,53 @@ net all DROP info</programlisting>then the chain name is 'net2all'
<itemizedlist>
<listitem>
<para>amanda</para>
<para><emphasis role="bold">amanda</emphasis></para>
</listitem>
<listitem>
<para>ftp</para>
<para><emphasis role="bold">ftp</emphasis></para>
</listitem>
<listitem>
<para>h323</para>
<para><emphasis role="bold">h323</emphasis></para>
</listitem>
<listitem>
<para>irc</para>
<para><emphasis role="bold">irc</emphasis></para>
</listitem>
<listitem>
<para>netbios-ns</para>
<para><emphasis role="bold">netbios-ns</emphasis></para>
</listitem>
<listitem>
<para>pptp</para>
<para><emphasis role="bold">none</emphasis> - This special value
was added in Shorewall 4.5.16 and indicates that no helpers are
to be enabled. It also prevents the compiler for probing for
helper support; such probing generates messages on the system
log of the form "xt_CT: No such helper XXX" where XXX is the
helper name. When used, <emphasis role="bold">none</emphasis>
must be the only helper specified.</para>
</listitem>
<listitem>
<para>sane</para>
<para><emphasis role="bold">pptp</emphasis></para>
</listitem>
<listitem>
<para>sip</para>
<para><emphasis role="bold">sane</emphasis></para>
</listitem>
<listitem>
<para>snmp</para>
<para><emphasis role="bold">sip</emphasis></para>
</listitem>
<listitem>
<para>tftp</para>
<para><emphasis role="bold">snmp</emphasis></para>
</listitem>
<listitem>
<para><emphasis role="bold">tftp</emphasis></para>
</listitem>
</itemizedlist>

View File

@ -700,43 +700,53 @@ net all DROP info</programlisting>then the chain name is 'net2all'
<itemizedlist>
<listitem>
<para>amanda</para>
<para><emphasis role="bold">amanda</emphasis></para>
</listitem>
<listitem>
<para>ftp</para>
<para><emphasis role="bold">ftp</emphasis></para>
</listitem>
<listitem>
<para>h323</para>
<para><emphasis role="bold">h323</emphasis></para>
</listitem>
<listitem>
<para>irc</para>
<para><emphasis role="bold">irc</emphasis></para>
</listitem>
<listitem>
<para>netbios-ns</para>
<para><emphasis role="bold">netbios-ns</emphasis></para>
</listitem>
<listitem>
<para>pptp</para>
<para><emphasis role="bold">none</emphasis> - This special value
was added in Shorewall 4.5.16 and indicates that no helpers are
to be enabled. It also prevents the compiler for probing for
helper support; such probing generates messages on the system
log of the form "xt_CT: No such helper XXX" where XXX is the
helper name. When used, <emphasis role="bold">none</emphasis>
must be the only helper specified.</para>
</listitem>
<listitem>
<para>sane</para>
<para><emphasis role="bold">pptp</emphasis></para>
</listitem>
<listitem>
<para>sip</para>
<para><emphasis role="bold">sane</emphasis></para>
</listitem>
<listitem>
<para>snmp</para>
<para><emphasis role="bold">sip</emphasis></para>
</listitem>
<listitem>
<para>tftp</para>
<para><emphasis role="bold">snmp</emphasis></para>
</listitem>
<listitem>
<para><emphasis role="bold">tftp</emphasis></para>
</listitem>
</itemizedlist>