mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-22 14:20:40 +01:00
Documentation updates suggested by Jeffrey Spain.
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
9869b4c068
commit
c751a0ada3
@ -223,8 +223,8 @@
|
|||||||
|
|
||||||
<entry><ulink url="OpenVZ.html">OpenVZ</ulink></entry>
|
<entry><ulink url="OpenVZ.html">OpenVZ</ulink></entry>
|
||||||
|
|
||||||
<entry><ulink url="LennyToSqueeze.html">Upgrading to Shorewall 4.4
|
<entry><ulink url="upgrade_issues.htm">Upgrade
|
||||||
(Upgrading Debian Lenny to Squeeze)</ulink></entry>
|
Issues</ulink></entry>
|
||||||
</row>
|
</row>
|
||||||
|
|
||||||
<row>
|
<row>
|
||||||
@ -234,7 +234,8 @@
|
|||||||
<entry><ulink url="starting_and_stopping_shorewall.htm">Operating
|
<entry><ulink url="starting_and_stopping_shorewall.htm">Operating
|
||||||
Shorewall</ulink></entry>
|
Shorewall</ulink></entry>
|
||||||
|
|
||||||
<entry><ulink url="VPNBasics.html">VPN</ulink></entry>
|
<entry><ulink url="LennyToSqueeze.html">Upgrading to Shorewall 4.4
|
||||||
|
(Upgrading Debian Lenny to Squeeze)</ulink></entry>
|
||||||
</row>
|
</row>
|
||||||
|
|
||||||
<row>
|
<row>
|
||||||
@ -245,7 +246,7 @@
|
|||||||
<entry><ulink url="PacketMarking.html">Packet
|
<entry><ulink url="PacketMarking.html">Packet
|
||||||
Marking</ulink></entry>
|
Marking</ulink></entry>
|
||||||
|
|
||||||
<entry><ulink url="VPN.htm">VPN Passthrough</ulink></entry>
|
<entry><ulink url="VPNBasics.html">VPN</ulink></entry>
|
||||||
</row>
|
</row>
|
||||||
|
|
||||||
<row>
|
<row>
|
||||||
@ -255,8 +256,7 @@
|
|||||||
<entry><ulink url="PacketHandling.html">Packet Processing in a
|
<entry><ulink url="PacketHandling.html">Packet Processing in a
|
||||||
Shorewall-based Firewall</ulink></entry>
|
Shorewall-based Firewall</ulink></entry>
|
||||||
|
|
||||||
<entry><ulink url="blacklisting_support.htm#whitelisting">White
|
<entry><ulink url="VPN.htm">VPN Passthrough</ulink></entry>
|
||||||
List Creation</ulink></entry>
|
|
||||||
</row>
|
</row>
|
||||||
|
|
||||||
<row>
|
<row>
|
||||||
@ -264,8 +264,8 @@
|
|||||||
|
|
||||||
<entry><ulink url="ping.html">'Ping' Management</ulink></entry>
|
<entry><ulink url="ping.html">'Ping' Management</ulink></entry>
|
||||||
|
|
||||||
<entry><ulink url="XenMyWay.html">Xen - Shorewall in a Bridged Xen
|
<entry><ulink url="blacklisting_support.htm#whitelisting">White
|
||||||
DomU</ulink></entry>
|
List Creation</ulink></entry>
|
||||||
</row>
|
</row>
|
||||||
|
|
||||||
<row>
|
<row>
|
||||||
@ -275,8 +275,8 @@
|
|||||||
<entry><ulink url="two-interface.htm#DNAT">Port
|
<entry><ulink url="two-interface.htm#DNAT">Port
|
||||||
Forwarding</ulink></entry>
|
Forwarding</ulink></entry>
|
||||||
|
|
||||||
<entry><ulink url="XenMyWay-Routed.html">Xen - Shorewall in Routed
|
<entry><ulink url="XenMyWay.html">Xen - Shorewall in a Bridged Xen
|
||||||
Xen Dom0</ulink></entry>
|
DomU</ulink></entry>
|
||||||
</row>
|
</row>
|
||||||
|
|
||||||
<row>
|
<row>
|
||||||
@ -285,7 +285,8 @@
|
|||||||
|
|
||||||
<entry><ulink url="ports.htm">Port Information</ulink></entry>
|
<entry><ulink url="ports.htm">Port Information</ulink></entry>
|
||||||
|
|
||||||
<entry/>
|
<entry><ulink url="XenMyWay-Routed.html">Xen - Shorewall in Routed
|
||||||
|
Xen Dom0</ulink></entry>
|
||||||
</row>
|
</row>
|
||||||
|
|
||||||
<row>
|
<row>
|
||||||
|
@ -16,7 +16,7 @@
|
|||||||
<pubdate><?dbtimestamp format="Y/m/d"?></pubdate>
|
<pubdate><?dbtimestamp format="Y/m/d"?></pubdate>
|
||||||
|
|
||||||
<copyright>
|
<copyright>
|
||||||
<year>2003-2009</year>
|
<year>2003-2012</year>
|
||||||
|
|
||||||
<holder>Thomas M. Eastep</holder>
|
<holder>Thomas M. Eastep</holder>
|
||||||
</copyright>
|
</copyright>
|
||||||
@ -385,9 +385,14 @@ ACCEPT net $FW tcp 22</programlisting>
|
|||||||
<section id="Packages">
|
<section id="Packages">
|
||||||
<title>Shorewall Packages</title>
|
<title>Shorewall Packages</title>
|
||||||
|
|
||||||
<para>Shorewall 4.3 and later consists of four packages.</para>
|
<para>Shorewall 4.5 and later consists of six packages.</para>
|
||||||
|
|
||||||
<orderedlist>
|
<orderedlist>
|
||||||
|
<listitem>
|
||||||
|
<para><emphasis role="bold">Shorewall-core</emphasis>. All of the
|
||||||
|
other packages depend on this one.</para>
|
||||||
|
</listitem>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para><emphasis role="bold">Shorewall</emphasis>. This package must be
|
<para><emphasis role="bold">Shorewall</emphasis>. This package must be
|
||||||
installed on at least one system in your network. It contains
|
installed on at least one system in your network. It contains
|
||||||
@ -417,6 +422,13 @@ ACCEPT net $FW tcp 22</programlisting>
|
|||||||
scripts are generated. These scripts are copied to the firewall
|
scripts are generated. These scripts are copied to the firewall
|
||||||
systems where they run under the control of Shorewall6-lite.</para>
|
systems where they run under the control of Shorewall6-lite.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
|
|
||||||
|
<listitem>
|
||||||
|
<para><emphasis role="bold">Shorewall-init</emphasis>. May be
|
||||||
|
installed with any of the other firewall packages. Allows the firewall
|
||||||
|
to be close prior to bringing up network interfaces. It can also react
|
||||||
|
to interface up/down events.</para>
|
||||||
|
</listitem>
|
||||||
</orderedlist>
|
</orderedlist>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
|
@ -31,9 +31,11 @@
|
|||||||
|
|
||||||
<year>2009</year>
|
<year>2009</year>
|
||||||
|
|
||||||
|
<year>2012</year>
|
||||||
|
|
||||||
<holder>Thomas M. Eastep</holder>
|
<holder>Thomas M. Eastep</holder>
|
||||||
|
|
||||||
<holder></holder>
|
<holder/>
|
||||||
</copyright>
|
</copyright>
|
||||||
|
|
||||||
<legalnotice>
|
<legalnotice>
|
||||||
@ -74,6 +76,39 @@
|
|||||||
zones.</para>
|
zones.</para>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
|
<section>
|
||||||
|
<title>Versions >= 4.5.0</title>
|
||||||
|
|
||||||
|
<para/>
|
||||||
|
|
||||||
|
<orderedlist>
|
||||||
|
<listitem>
|
||||||
|
<para>The BLACKLIST section of the rules file has been eliminated. If
|
||||||
|
you have entries in that file section, you must move them to the
|
||||||
|
blrules file. </para>
|
||||||
|
</listitem>
|
||||||
|
|
||||||
|
<listitem>
|
||||||
|
<para>This version of Shorewall requires the Digest::SHA1 Perl
|
||||||
|
module.</para>
|
||||||
|
|
||||||
|
<simplelist>
|
||||||
|
<member>Debian: libdigest-sha1-perl</member>
|
||||||
|
|
||||||
|
<member>Fedora: perl-Digest-SHA1</member>
|
||||||
|
|
||||||
|
<member>OpenSuSE: perl-Digest-SHA1 </member>
|
||||||
|
</simplelist>
|
||||||
|
</listitem>
|
||||||
|
|
||||||
|
<listitem>
|
||||||
|
<para>The generated firewall script now maintains the
|
||||||
|
/var/lib/shorewall[6][-lite]/interface.status files used by SWPING and
|
||||||
|
by LSM.</para>
|
||||||
|
</listitem>
|
||||||
|
</orderedlist>
|
||||||
|
</section>
|
||||||
|
|
||||||
<section>
|
<section>
|
||||||
<title>Versions >= 4.4.0</title>
|
<title>Versions >= 4.4.0</title>
|
||||||
|
|
||||||
@ -318,7 +353,7 @@
|
|||||||
</listitem>
|
</listitem>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para> Beginning with Shorewall 4.4.17, the EXPORTPARAMS option is
|
<para>Beginning with Shorewall 4.4.17, the EXPORTPARAMS option is
|
||||||
deprecated. With EXPORTPARAMS=No, the variables set by <ulink
|
deprecated. With EXPORTPARAMS=No, the variables set by <ulink
|
||||||
url="manpages/shorewall-params.html">/etc/shorewall/params</ulink>
|
url="manpages/shorewall-params.html">/etc/shorewall/params</ulink>
|
||||||
(<ulink
|
(<ulink
|
||||||
|
Loading…
Reference in New Issue
Block a user