From 9d24ac3fc0a555f0c5ce3de4f21580aaba3b042c Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Wed, 15 Mar 2006 03:45:49 +0000
Subject: [PATCH] Add advice about IP_FORWARDING=Yes to FAQ 2

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3671 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 docs/FAQ.xml | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index 7979cdde4..ae560e3a9 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -17,7 +17,7 @@
       </author>
     </authorgroup>
 
-    <pubdate>2006-03-11</pubdate>
+    <pubdate>2006-03-14</pubdate>
 
     <copyright>
       <year>2001-2006</year>
@@ -543,6 +543,15 @@ DNAT       loc           dmz:192.168.2.4    tcp      80          -         $ETH0
           restore</command></ulink>.</para>
         </warning>
       </section>
+
+      <section id="faq2c">
+        <title>(FAQ 2c) I tried to apply the answer to FAQ 2 to my external
+        interface and the net zone and it didn't work. Why?</title>
+
+        <para><emphasis role="bold">Answer</emphasis>: Did you set <emphasis
+        role="bold">IP_FORWARDING=Yes</emphasis> in
+        <filename>shorewall.conf</filename>?</para>
+      </section>
     </section>
   </section>
 
@@ -1656,7 +1665,7 @@ iptables: Invalid argument
           <para>Netfilter/iptables doesn't fully support IPSEC in the 2.6
           Kernels prior to 2.6.16 -- kernel and iptables patches are available
           and the details may be found at the <ulink
-          url="IPSEC-2.6.html">Shorewall IPSEC-2.6 page</ulink>. </para>
+          url="IPSEC-2.6.html">Shorewall IPSEC-2.6 page</ulink>.</para>
         </listitem>
 
         <listitem>