mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-09 01:04:06 +01:00
Document nested zone alchemy
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2655 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
1d763c84df
commit
c205e70b1f
@ -19,7 +19,24 @@ New Features in 2.5.5:
|
||||
firewall The firewall zone. There must be
|
||||
exactly one firewall zone.
|
||||
|
||||
2) When /usr/share/shorewall/functions is loaded it now sets
|
||||
2) You may now define zone nesting in the /etc/shorewall/zones
|
||||
file. In the ZONE column, the (sub)zone name can be followed by a
|
||||
colon (":") and a comma-separated list of parent zones. The parent
|
||||
zone(s) must be listed before the subzone.
|
||||
|
||||
Example: Zone B is a subzone of zone A
|
||||
|
||||
#ZONE TYPE OPTIONS
|
||||
A plain
|
||||
B:A plain
|
||||
|
||||
Currently, Shorewall only uses the zone nesting information to
|
||||
re-order the zone list such that subzones appear before their
|
||||
parent zones. In a future release, Shorewall might make additional
|
||||
use of this information to structure the ruleset in a more
|
||||
efficient fashion.
|
||||
|
||||
3) When /usr/share/shorewall/functions is loaded it now sets
|
||||
|
||||
SHOREWALL_LIBRARY=Loaded
|
||||
|
||||
@ -448,7 +465,7 @@ New Features in Shorewall 2.5.*
|
||||
|
||||
The /etc/shorewall/rules file may now be divided into
|
||||
"sections". Each section is introduced by a line that begins with
|
||||
the keyword SECTION which is followed by the section name. Sections
|
||||
the keyword SECTION followed by the section name. Sections
|
||||
are as listed below and must appear in the order shown.
|
||||
|
||||
ESTABLISHED
|
||||
|
Loading…
Reference in New Issue
Block a user