diff --git a/docs/standalone.xml b/docs/standalone.xml index d47e46754..521925f4a 100644 --- a/docs/standalone.xml +++ b/docs/standalone.xml @@ -277,7 +277,7 @@ net ipv4 The /etc/shorewall/policy file included with the one-interface sample has the following policies: - #SOURCE ZONE DESTINATION ZONE POLICY LOG LEVEL LIMIT:BURST + #SOURCE DEST POLICY LOGLEVEL LIMIT $FW net ACCEPT net all DROP info all all REJECT info @@ -517,20 +517,19 @@ root@lists:~# /usr/share/shorewall/macro.*, the general format of a rule in /etc/shorewall/rules is: - #ACTION SOURCE DESTINATION PROTO DEST PORT(S) + #ACTION SOURCE DEST PROTO DPORT <macro>(ACCEPT) net $FW Be sure to add your rules after the line that reads SECTION NEW (?SECTION NEW in Shorewall 4.6.0 and - later). + role="bold">?SECTION NEW. You want to run a Web Server and a IMAP Server on your firewall system: - #ACTION SOURCE DESTINATION PROTO DEST PORT(S) + #ACTION SOURCE DEST PROTO DPORT Web(ACCEPT) net $FW IMAP(ACCEPT)net $FW @@ -546,14 +545,14 @@ IMAP(ACCEPT)net $FW a pre-defined macro that meets your requirements. In that case the general format of a rule in /etc/shorewall/rules is: - #ACTION SOURCE DESTINATION PROTO DEST PORT(S) + #ACTION SOURCE DEST PROTO DPORT ACCEPT net $FW <protocol> <port> You want to run a Web Server and a IMAP Server on your firewall system: - #ACTION SOURCE DESTINATION PROTO DEST PORT(S) + #ACTION SOURCE DEST PROTO DPORT ACCEPT net $FW tcp 80 ACCEPT net $FW tcp 143 @@ -566,7 +565,7 @@ ACCEPT net $FW tcp 143 uses clear text (even for login!). If you want shell access to your firewall from the Internet, use SSH: - #ACTION SOURCE DESTINATION PROTO DEST PORT(S) + #ACTION SOURCE DESTINATION PROTO DPORT SSH(ACCEPT) net $FW @@ -615,7 +614,7 @@ SSH(ACCEPT) net $FW (/etc/shorewall/routestopped in Shorewall 4.5.7 and earlier). A running firewall may be restarted using - the shorewall restart command. If you + the shorewall reload command. If you want to totally remove any trace of Shorewall from your Netfilter configuration, use shorewall clear. @@ -639,7 +638,7 @@ SSH(ACCEPT) net $FW Also, I don't recommend using shorewall - restart; it is better to create an ; it is better to create an alternate configuration and test it using the shorewall