mirror of
https://gitlab.com/shorewall/code.git
synced 2025-05-20 16:10:50 +02:00
Improve shorewall.conf comments
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1231 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
4ebca5b875
commit
bc20b88b35
@ -435,7 +435,7 @@ MUTEX_TIMEOUT=60
|
|||||||
# established connection.
|
# established connection.
|
||||||
#
|
#
|
||||||
# If NEWNOTSYN is set to "No" or "no", then non-SYN packets that are not
|
# If NEWNOTSYN is set to "No" or "no", then non-SYN packets that are not
|
||||||
# part of an already established connection, it will be dropped by the
|
# part of an already established connection will be dropped by the
|
||||||
# firewall. The setting of LOGNEWNOTSYN above determines if these packets are
|
# firewall. The setting of LOGNEWNOTSYN above determines if these packets are
|
||||||
# logged before they are dropped.
|
# logged before they are dropped.
|
||||||
#
|
#
|
||||||
@ -447,8 +447,8 @@ MUTEX_TIMEOUT=60
|
|||||||
# also need to select NEWNOTSYN=Yes.
|
# also need to select NEWNOTSYN=Yes.
|
||||||
#
|
#
|
||||||
# The behavior of NEWNOTSYN=Yes may also be enabled on a per-interface basis
|
# The behavior of NEWNOTSYN=Yes may also be enabled on a per-interface basis
|
||||||
# using the 'newnotsyn' option in /etc/shorewall/interfaces and in
|
# using the 'newnotsyn' option in /etc/shorewall/interfaces and on a
|
||||||
# /etc/shorewall/hosts.
|
# network or host basis using the same option in /etc/shorewall/hosts.
|
||||||
|
|
||||||
#
|
#
|
||||||
# I find that NEWNOTSYN=No tends to result in lots of "stuck"
|
# I find that NEWNOTSYN=No tends to result in lots of "stuck"
|
||||||
|
Loading…
Reference in New Issue
Block a user