diff --git a/docs/standalone.xml b/docs/standalone.xml
index d47e46754..521925f4a 100644
--- a/docs/standalone.xml
+++ b/docs/standalone.xml
@@ -277,7 +277,7 @@ net ipv4
The /etc/shorewall/policy file included with
the one-interface sample has the following policies:
- #SOURCE ZONE DESTINATION ZONE POLICY LOG LEVEL LIMIT:BURST
+ #SOURCE DEST POLICY LOGLEVEL LIMIT
$FW net ACCEPT
net all DROP info
all all REJECT info
@@ -517,20 +517,19 @@ root@lists:~#
/usr/share/shorewall/macro.*, the general format of a
rule in /etc/shorewall/rules is:
- #ACTION SOURCE DESTINATION PROTO DEST PORT(S)
+ #ACTION SOURCE DEST PROTO DPORT
<macro>(ACCEPT) net $FW
Be sure to add your rules after the line that reads SECTION NEW (?SECTION NEW in Shorewall 4.6.0 and
- later).
+ role="bold">?SECTION NEW.
You want to run a Web Server and a IMAP Server on your firewall
system:
- #ACTION SOURCE DESTINATION PROTO DEST PORT(S)
+ #ACTION SOURCE DEST PROTO DPORT
Web(ACCEPT) net $FW
IMAP(ACCEPT)net $FW
@@ -546,14 +545,14 @@ IMAP(ACCEPT)net $FW
a pre-defined macro that meets your requirements. In that case the general
format of a rule in /etc/shorewall/rules is:
- #ACTION SOURCE DESTINATION PROTO DEST PORT(S)
+ #ACTION SOURCE DEST PROTO DPORT
ACCEPT net $FW <protocol> <port>
You want to run a Web Server and a IMAP Server on your firewall
system:
- #ACTION SOURCE DESTINATION PROTO DEST PORT(S)
+ #ACTION SOURCE DEST PROTO DPORT
ACCEPT net $FW tcp 80
ACCEPT net $FW tcp 143
@@ -566,7 +565,7 @@ ACCEPT net $FW tcp 143
uses clear text (even for login!). If you want shell access to your
firewall from the Internet, use SSH:
- #ACTION SOURCE DESTINATION PROTO DEST PORT(S)
+ #ACTION SOURCE DESTINATION PROTO DPORT
SSH(ACCEPT) net $FW
@@ -615,7 +614,7 @@ SSH(ACCEPT) net $FW
(/etc/shorewall/routestopped
in Shorewall 4.5.7 and earlier). A running firewall may be restarted using
- the shorewall restart
command. If you
+ the shorewall reload
command. If you
want to totally remove any trace of Shorewall from your Netfilter
configuration, use shorewall
clear
.
@@ -639,7 +638,7 @@ SSH(ACCEPT) net $FW
Also, I don't recommend using shorewall
- restart
; it is better to create an ; it is better to create an alternate
configuration and test it using the shorewall