extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-24 19:51:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Updates and minor fixes.

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8665 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
el_cubano 2008-08-15 00:12:01 +00:00
parent 130ace8951
commit 9bfdc003f5
1 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
docs/FAQ.xml
View File

@ -74,7 +74,7 @@
class="directory">/etc/shorewall</filename> directory is almost empty. class="directory">/etc/shorewall</filename> directory is almost empty.
This is intentional. The released configuration file skeletons may be This is intentional. The released configuration file skeletons may be
found on your system in the directory <filename found on your system in the directory <filename
class="directory">/usr/share/doc/shorewall/default-config</filename>. class="directory">/usr/share/doc/shorewall-common/default-config</filename>.
Simply copy the files you need from that directory to <filename Simply copy the files you need from that directory to <filename
class="directory">/etc/shorewall</filename> and modify the class="directory">/etc/shorewall</filename> and modify the
copies.</para> copies.</para>
@ -84,10 +84,11 @@
the sample configurations.</title> the sample configurations.</title>
<para><emphasis role="bold">Answer</emphasis>: With Shorewall 3.x, the <para><emphasis role="bold">Answer</emphasis>: With Shorewall 3.x, the
samples are included in the shorewall-doc package and are installed in samples are included in the shorewall package and are installed in
<filename <filename
class="directory">/usr/share/doc/shorewall/examples/</filename>. class="directory">/usr/share/doc/shorewall/examples/</filename>.
Beginning with Shorewall 4.0, the samples are in <filename Beginning with Shorewall 4.0, the samples are in the shorewall-common
package and are installed in <filename
class="directory">/usr/share/doc/shorewall-common/examples</filename>/.</para> class="directory">/usr/share/doc/shorewall-common/examples</filename>/.</para>
</section> </section>
</section> </section>
@ -435,7 +436,7 @@ DNAT net loc:192.168.1.4 tcp 21 - 206.1
</listitem> </listitem>
</orderedlist> </orderedlist>
<para>At this point, one of two things can happen.either the second <para>At this point, one of two things can happen. Either the second
router discards or rejects the packet; or, it rewrites the source IP router discards or rejects the packet; or, it rewrites the source IP
address to 130.252.100.109 and forwards the packet back to address to 130.252.100.109 and forwards the packet back to
16.105.221.4. Regardless of which happens, the connection is doomed. 16.105.221.4. Regardless of which happens, the connection is doomed.
@ -508,7 +509,7 @@ eth0:66.249.93.111 0.0.0.0/0 206.124.146.176 tcp 993</programlistin
<section id="faq38"> <section id="faq38">
<title>(FAQ 38) Where can I find more information about DNAT?</title> <title>(FAQ 38) Where can I find more information about DNAT?</title>
<para><emphasis role="bold">Answer</emphasis>:Ian Allen has written a <para><emphasis role="bold">Answer</emphasis>: Ian Allen has written a
<ulink url="http://ian.idallen.ca/dnat.txt">Paper about DNAT and <ulink url="http://ian.idallen.ca/dnat.txt">Paper about DNAT and
Linux</ulink>.</para> Linux</ulink>.</para>
</section> </section>
@ -1924,7 +1925,7 @@ iptables: Invalid argument
the same thing. In the case of <trademark>Debian</trademark> systems for the same thing. In the case of <trademark>Debian</trademark> systems for
example, that command actually executes <command>/sbin/shorewall example, that command actually executes <command>/sbin/shorewall
clear</command> which opens the firewall completely. In other words, in clear</command> which opens the firewall completely. In other words, in
the init scripts <command>stop</command> undoes the effect of the init script's <command>stop</command> reverses the effect of
<command>start</command>.</para> <command>start</command>.</para>
<para>One way to avoid these differences is to install Shorewall from <para>One way to avoid these differences is to install Shorewall from
@ -2622,4 +2623,4 @@ loc $FW ACCEPT </programlisting>
policies.</para> policies.</para>
</section> </section>
</section> </section>
</article> </article>