Disallow refresh of built-in chains

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7688 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-11-18 16:16:53 +00:00
parent 8f368139f6
commit c3cd826cb2

View File

@ -932,7 +932,8 @@
can refresh chains in other tables by prefixing the chain name with
the table name followed by ":" (e.g., nat:net_dnat). Chain names
which follow are assumed to be in that table until the end of the
list or until an entry in the list names another table.</para>
list or until an entry in the list names another table. Built-in
chains such as FORWARD may not be refreshed.</para>
<para>Example:<programlisting><command>shorewall refresh net2fw nat:net_dnat</command> #Refresh the 'net2loc' chain in the filter table and the 'net_dnat' chain in the nat table</programlisting></para>
</listitem>