Documentation updates suggested by Jeffrey Spain.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2012-02-20 11:30:06 -08:00
parent 9869b4c068
commit c751a0ada3
3 changed files with 63 additions and 15 deletions

View File

@ -223,8 +223,8 @@
<entry><ulink url="OpenVZ.html">OpenVZ</ulink></entry>
<entry><ulink url="LennyToSqueeze.html">Upgrading to Shorewall 4.4
(Upgrading Debian Lenny to Squeeze)</ulink></entry>
<entry><ulink url="upgrade_issues.htm">Upgrade
Issues</ulink></entry>
</row>
<row>
@ -234,7 +234,8 @@
<entry><ulink url="starting_and_stopping_shorewall.htm">Operating
Shorewall</ulink></entry>
<entry><ulink url="VPNBasics.html">VPN</ulink></entry>
<entry><ulink url="LennyToSqueeze.html">Upgrading to Shorewall 4.4
(Upgrading Debian Lenny to Squeeze)</ulink></entry>
</row>
<row>
@ -245,7 +246,7 @@
<entry><ulink url="PacketMarking.html">Packet
Marking</ulink></entry>
<entry><ulink url="VPN.htm">VPN Passthrough</ulink></entry>
<entry><ulink url="VPNBasics.html">VPN</ulink></entry>
</row>
<row>
@ -255,8 +256,7 @@
<entry><ulink url="PacketHandling.html">Packet Processing in a
Shorewall-based Firewall</ulink></entry>
<entry><ulink url="blacklisting_support.htm#whitelisting">White
List Creation</ulink></entry>
<entry><ulink url="VPN.htm">VPN Passthrough</ulink></entry>
</row>
<row>
@ -264,8 +264,8 @@
<entry><ulink url="ping.html">'Ping' Management</ulink></entry>
<entry><ulink url="XenMyWay.html">Xen - Shorewall in a Bridged Xen
DomU</ulink></entry>
<entry><ulink url="blacklisting_support.htm#whitelisting">White
List Creation</ulink></entry>
</row>
<row>
@ -275,8 +275,8 @@
<entry><ulink url="two-interface.htm#DNAT">Port
Forwarding</ulink></entry>
<entry><ulink url="XenMyWay-Routed.html">Xen - Shorewall in Routed
Xen Dom0</ulink></entry>
<entry><ulink url="XenMyWay.html">Xen - Shorewall in a Bridged Xen
DomU</ulink></entry>
</row>
<row>
@ -285,7 +285,8 @@
<entry><ulink url="ports.htm">Port Information</ulink></entry>
<entry/>
<entry><ulink url="XenMyWay-Routed.html">Xen - Shorewall in Routed
Xen Dom0</ulink></entry>
</row>
<row>

View File

@ -16,7 +16,7 @@
<pubdate><?dbtimestamp format="Y/m/d"?></pubdate>
<copyright>
<year>2003-2009</year>
<year>2003-2012</year>
<holder>Thomas M. Eastep</holder>
</copyright>
@ -385,9 +385,14 @@ ACCEPT net $FW tcp 22</programlisting>
<section id="Packages">
<title>Shorewall Packages</title>
<para>Shorewall 4.3 and later consists of four packages.</para>
<para>Shorewall 4.5 and later consists of six packages.</para>
<orderedlist>
<listitem>
<para><emphasis role="bold">Shorewall-core</emphasis>. All of the
other packages depend on this one.</para>
</listitem>
<listitem>
<para><emphasis role="bold">Shorewall</emphasis>. This package must be
installed on at least one system in your network. It contains
@ -417,6 +422,13 @@ ACCEPT net $FW tcp 22</programlisting>
scripts are generated. These scripts are copied to the firewall
systems where they run under the control of Shorewall6-lite.</para>
</listitem>
<listitem>
<para><emphasis role="bold">Shorewall-init</emphasis>. May be
installed with any of the other firewall packages. Allows the firewall
to be close prior to bringing up network interfaces. It can also react
to interface up/down events.</para>
</listitem>
</orderedlist>
</section>

View File

@ -31,9 +31,11 @@
<year>2009</year>
<year>2012</year>
<holder>Thomas M. Eastep</holder>
<holder></holder>
<holder/>
</copyright>
<legalnotice>
@ -74,6 +76,39 @@
zones.</para>
</section>
<section>
<title>Versions &gt;= 4.5.0</title>
<para/>
<orderedlist>
<listitem>
<para>The BLACKLIST section of the rules file has been eliminated. If
you have entries in that file section, you must move them to the
blrules file. </para>
</listitem>
<listitem>
<para>This version of Shorewall requires the Digest::SHA1 Perl
module.</para>
<simplelist>
<member>Debian: libdigest-sha1-perl</member>
<member>Fedora: perl-Digest-SHA1</member>
<member>OpenSuSE: perl-Digest-SHA1 </member>
</simplelist>
</listitem>
<listitem>
<para>The generated firewall script now maintains the
/var/lib/shorewall[6][-lite]/interface.status files used by SWPING and
by LSM.</para>
</listitem>
</orderedlist>
</section>
<section>
<title>Versions &gt;= 4.4.0</title>
@ -318,7 +353,7 @@
</listitem>
<listitem>
<para> Beginning with Shorewall 4.4.17, the EXPORTPARAMS option is
<para>Beginning with Shorewall 4.4.17, the EXPORTPARAMS option is
deprecated. With EXPORTPARAMS=No, the variables set by <ulink
url="manpages/shorewall-params.html">/etc/shorewall/params</ulink>
(<ulink