mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-22 06:10:42 +01:00
Clarify ipsets WRT xtables-addons.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
50030bcc2d
commit
a990ceecba
@ -48,10 +48,10 @@
|
||||
<section id="Ipsets">
|
||||
<title>What are Ipsets?</title>
|
||||
|
||||
<para>Ipsets are an extension to Netfilter/iptables that are currently
|
||||
available in <ulink
|
||||
url="http://xtables-addons.sourceforge.net/">xtables-addons</ulink>.
|
||||
Instructions for installing xtables-addons may be found in the <ulink
|
||||
<para>Ipsets are an extension to Netfilter/iptables that are available in
|
||||
<ulink url="http://xtables-addons.sourceforge.net/">xtables-addons</ulink>
|
||||
if they are not available in your current distribution. Instructions for
|
||||
installing xtables-addons may be found in the <ulink
|
||||
url="Dynamic.html">Dynamic Zones article</ulink>.</para>
|
||||
|
||||
<para>Ipset allows you to create one or more named sets of addresses then
|
||||
@ -172,6 +172,6 @@ ACCEPT net:+sshok $FW tcp 22</programlisting></para>
|
||||
contents of the ipsets will be save to and restored from. Shorewall-init
|
||||
will create any necessary directories during the first 'save' operation.
|
||||
If you configure Shorewall-init to save/restore ipsets, be sure to set
|
||||
SAVE_IPSETS=No in shorewall.conf and shorewall6.conf. </para>
|
||||
SAVE_IPSETS=No in shorewall.conf and shorewall6.conf.</para>
|
||||
</section>
|
||||
</article>
|
||||
|
Loading…
Reference in New Issue
Block a user