Disallow refresh of built-in chains

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7688 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-11-18 16:16:53 +00:00
parent 8f368139f6
commit c3cd826cb2

View File

@ -932,7 +932,8 @@
can refresh chains in other tables by prefixing the chain name with can refresh chains in other tables by prefixing the chain name with
the table name followed by ":" (e.g., nat:net_dnat). Chain names the table name followed by ":" (e.g., nat:net_dnat). Chain names
which follow are assumed to be in that table until the end of the which follow are assumed to be in that table until the end of the
list or until an entry in the list names another table.</para> list or until an entry in the list names another table. Built-in
chains such as FORWARD may not be refreshed.</para>
<para>Example:<programlisting><command>shorewall refresh net2fw nat:net_dnat</command> #Refresh the 'net2loc' chain in the filter table and the 'net_dnat' chain in the nat table</programlisting></para> <para>Example:<programlisting><command>shorewall refresh net2fw nat:net_dnat</command> #Refresh the 'net2loc' chain in the filter table and the 'net_dnat' chain in the nat table</programlisting></para>
</listitem> </listitem>