diff --git a/docs/XenMyWay-Routed.xml b/docs/XenMyWay-Routed.xml
index bcf915dcd..d8e04ba3d 100644
--- a/docs/XenMyWay-Routed.xml
+++ b/docs/XenMyWay-Routed.xml
@@ -255,20 +255,20 @@ disk = [ 'phy:hda3,hda3,w' ]
- The zones correspond to the Shorewall zones in the firewall Dom0
+ The zones correspond to the Shorewall zones in the Dom0
configuration.
Under some circumstances, UDP and/or TCP communication from a
domU won't work for no obvious reason. That happened with the
lists domain in my setup. Looking at
- the IP traffic with tcpdump -nvvi eth1 in the
- firewall domU showed that UDP packets
- from the lists domU had incorrect
- checksums. That problem was corrected by arranging for the following
- command to be executed in the lists
- domain when its eth0 device
- was brought up:
+ the IP traffic with tcpdump -nvvi eth1 in dom0
+ showed that UDP packets from the lists domU had incorrect checksums. That
+ problem was corrected by arranging for the following command to be
+ executed in the lists domain when its
+ eth0 device was brought
+ up:
ethtool -K eth0 tx off
@@ -296,16 +296,16 @@ fi
- Firewall Dom0 Configuration
+ Dom0 Shorewall Configuration
- In the firewall Dom0, I run a conventional three-interface
- firewall with Proxy ARP DMZ -- it is very similar to the firewall
- described in the Shorewall Setup
- Guide with the exception that I've added a fourth interface for
- our wireless network. The firewall runs a routed OpenVPN server to provide roadwarrior access
- for our two laptops and a bridged OpenVPN server for the wireless
- network in our home. Here is the firewall's view of the network:
+ In Dom0, I run a conventional three-interface firewall with Proxy
+ ARP DMZ -- it is very similar to the firewall described in the Shorewall Setup Guide with the
+ exception that I've added a fourth interface for our wireless network.
+ The firewall runs a routed OpenVPN
+ server to provide roadwarrior access for our two laptops and a
+ bridged OpenVPN server for the wireless network in our home. Here is the
+ firewall's view of the network: