extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-23 06:38:53 +01:00
Code Issues Packages Projects Releases Wiki Activity

Document IPv6 Dynamic Zones

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-06-20 10:59:14 -07:00
parent 119d38c92b
commit c112f2381e
5 changed files with 58 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/Dynamic.xml
View File

@ -210,6 +210,11 @@ webok eth0:dynamic</programlisting>
ipset, such as <firstterm>macipmap</firstterm>, then you will want to
manually create that ipset yourself before the next Shorewall
start/restart.</para>
<para>The dynamic zone capability was added to Shorewall6 in Shorewall
4.4.21. One limitation of that support is that you may not have an ipv6
dynamic zone with the same name and same interface as an ipv4 dynamic
zone.</para>
</section>
<section>

16
manpages/shorewall-hosts.xml
View File

@ -62,7 +62,8 @@
<term><emphasis role="bold">HOST(S)</emphasis> -
<emphasis>interface</emphasis>:{[{<emphasis>address-or-range</emphasis>[<emphasis
role="bold">,</emphasis><emphasis>address-or-range</emphasis>]...|<emphasis
role="bold">+</emphasis><emphasis>ipset</emphasis>}[<emphasis>exclusion</emphasis>]</term>
role="bold">+</emphasis><emphasis>ipset</emphasis>|<emphasis
role="bold">dynamic</emphasis>}[<emphasis>exclusion</emphasis>]</term>
<listitem>
<para>The name of an interface defined in the <ulink
@ -89,6 +90,19 @@
<listitem>
<para>The name of an <emphasis>ipset</emphasis>.</para>
</listitem>
<listitem>
<para>The word <option>dynamic</option> which makes the zone
dynamic in that you can use the <command>shorewall add</command>
and <command>shorewall delete</command> commands to change to
composition of the zone.</para>
<warning>
<para>You can not have a dynamic ipv6 zone with the same
<replaceable>zone-name</replaceable> and
<replaceable>interface</replaceable>.</para>
</warning>
</listitem>
</orderedlist>
<blockquote>

6
manpages/shorewall-interfaces.xml
View File

@ -407,6 +407,12 @@ loc eth2 -</programlisting>
<ulink
url="http://www.shorewall.net/Dynamic.html">http://www.shorewall.net/Dynamic.html</ulink>
for further information.</para>
<warning>
<para>You may not have an ipv6 dynamic zone with the same
<replaceable>zone-name</replaceable> and
<replaceable>interface</replaceable>.</para>
</warning>
</listitem>
</varlistentry>

14
manpages6/shorewall6-hosts.xml
View File

@ -90,6 +90,20 @@
<listitem>
<para>The name of an <emphasis>ipset</emphasis>.</para>
</listitem>
<listitem>
<para>The word <option>dynamic</option> which makes the zone
dynamic in that you can use the <command>shorewall add</command>
and <command>shorewall delete</command> commands to change to
composition of the zone. This capability was added in Shorewall
4.4.21.</para>
<warning>
<para>You can not have a dynamic ipv4 zone with the
same<replaceable> zone-name</replaceable> and<replaceable>
interface</replaceable>.</para>
</warning>
</listitem>
</orderedlist>
<blockquote>

18
manpages6/shorewall6-interfaces.xml
View File

@ -236,6 +236,24 @@ loc eth2 -</programlisting>
</listitem>
</varlistentry>
<varlistentry>
<term><emphasis role="bold">nets=dynamic</emphasis></term>
<listitem>
<para>Added in Shorewall 4.4.21. Defines the zone as
<firstterm>dynamic</firstterm>. Requires ipset match support
in your iptables and kernel. See <ulink
url="http://www.shorewall.net/Dynamic.html">http://www.shorewall.net/Dynamic.html</ulink>
for further information.</para>
<warning>
<para>You may not have an ipv4 dynamic zone with the same
<replaceable>zone-name</replaceable> and
<replaceable>interface</replaceable>.</para>
</warning>
</listitem>
</varlistentry>
<varlistentry>
<term><emphasis role="bold">optional</emphasis></term>