From bfc3b2d82ba4791ea2f1fa74054f1a88aab32de6 Mon Sep 17 00:00:00 2001 From: teastep Date: Thu, 12 Feb 2009 15:44:12 +0000 Subject: [PATCH] Fix indentation in manpage git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9437 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- manpages/shorewall-rules.xml | 97 +++++++++++++++++------------------- 1 file changed, 47 insertions(+), 50 deletions(-) diff --git a/manpages/shorewall-rules.xml b/manpages/shorewall-rules.xml index 76b4a1328..d7514a940 100644 --- a/manpages/shorewall-rules.xml +++ b/manpages/shorewall-rules.xml @@ -435,59 +435,56 @@ separated by a slash (e.g. FTP/ACCEPT) is still allowed but is deprecated. - + The ACTION may + optionally be followed by ":" and a syslog log level (e.g, + REJECT:info or DNAT:debug). This causes the packet to be + logged at the specified level. Note that if the ACTION involves destination network + address translation (DNAT, REDIRECT, SAME, etc.) then the + packet is logged before the + destination address is rewritten. + + If the ACTION names an + action declared in shorewall-actions(5) or + in /usr/share/shorewall/actions.std then: + + + + If the log level is followed by "!' then all rules + in the action are logged at the log level. + + + + If the log level is not followed by "!" then only + those rules in the action that do not specify logging are + logged at the specified level. + + + + The special log level none! suppresses logging by the + action. + + + + You may also specify ULOG or NFLOG (must be in upper case) as a log + level.This will log to the ULOG or NFLOG target for routing to + a separate log through use of ulogd (http://www.netfilter.org/projects/ulogd/index.html). + + Actions specifying logging may be followed by a log tag + (a string of alphanumeric characters) which is appended to the + string generated by the LOGPREFIX (in shorewall.conf(5)). + + Example: ACCEPT:info:ftp would include 'ftp ' at the end + of the log prefix generated by the LOGPREFIX setting. - -
- The ACTION may optionally - be followed by ":" and a syslog log level (e.g, REJECT:info or - DNAT:debug). This causes the packet to be logged at the specified - level. Note that if the ACTION - involves destination network address translation (DNAT, REDIRECT, - SAME, etc.) then the packet is logged before the destination address is - rewritten. - - If the ACTION names an - action declared in shorewall-actions(5) or in - /usr/share/shorewall/actions.std then: - - - - If the log level is followed by "!' then all rules in - the action are logged at the log level. - - - - If the log level is not followed by "!" then only those - rules in the action that do not specify logging are logged at - the specified level. - - - - The special log level none! suppresses logging by the - action. - - - - You may also specify ULOG - or NFLOG (must be in upper case) - as a log level.This will log to the ULOG or NFLOG target for - routing to a separate log through use of ulogd (http://www.netfilter.org/projects/ulogd/index.html). - - Actions specifying logging may be followed by a log tag (a - string of alphanumeric characters) which is appended to the string - generated by the LOGPREFIX (in shorewall.conf(5)). - - Example: ACCEPT:info:ftp would include 'ftp ' at the end of - the log prefix generated by the LOGPREFIX setting. -