diff --git a/docs/Events.xml b/docs/Events.xml
index cf41ae00a..65cfab77c 100644
--- a/docs/Events.xml
+++ b/docs/Events.xml
@@ -538,8 +538,7 @@ SetEvent(SSH,ACCEPT,src)
etc/shorewall/rules:
- #ACTION SOURCE DEST PROTO DEST
-# PORT(S)
+ #ACTION SOURCE DEST PROTO DPORT
SSHLIMIT net $FW tcp 22
@@ -645,8 +644,7 @@ SSHLIMIT net $FW tcp 22
To duplicate the SSHLIMIT entry in
/etc/shorewall/rules shown above:
- #ACTION SOURCE DEST PROTO DEST
-# PORT(S)
+ #ACTION SOURCE DEST PROTO DPORT
AutoBL(SSH,-,-,-,REJECT,warn)\
net $FW tcp 22
@@ -688,8 +686,7 @@ Knock #Port Knocking
#
?format 2
###############################################################################
-#ACTION SOURCE DEST PROTO DEST
-# PORT(S)
+#ACTION SOURCE DEST PROTO DPORT
IfEvent(SSH,ACCEPT:info,60,1,src,reset)\
- - tcp 22
SetEvent(SSH,ACCEPT) - - tcp 1600
@@ -697,8 +694,7 @@ ResetEvent(SSH,DROP:info)
etc/shorewall/rules:
- #ACTION SOURCE DEST PROTO DEST
-# PORT(S)
+ #ACTION SOURCE DEST PROTO DPORT
Knock net $FW tcp 22,1599-1601