Correct routestopped files.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2014-03-02 10:39:12 -08:00
parent 4eadec234a
commit caa72fb7d2
2 changed files with 11 additions and 23 deletions

View File

@ -118,7 +118,7 @@
</varlistentry> </varlistentry>
<varlistentry> <varlistentry>
<term>notrack</term> <term><emphasis role="bold">notrack</emphasis></term>
<listitem> <listitem>
<para>The traffic will be exempted from connection <para>The traffic will be exempted from connection
@ -126,6 +126,13 @@
</listitem> </listitem>
</varlistentry> </varlistentry>
</variablelist> </variablelist>
<note>
<para>The <emphasis role="bold">source</emphasis> and <emphasis
role="bold">dest</emphasis> options work best when used in
conjunction with ADMINISABSENTMINDED=Yes in <ulink
url="shorewall6.conf.html">shorewall6.conf</ulink>(5).</para>
</note>
</listitem> </listitem>
</varlistentry> </varlistentry>

View File

@ -114,30 +114,11 @@
</varlistentry> </varlistentry>
<varlistentry> <varlistentry>
<term><emphasis role="bold">critical</emphasis></term> <term><emphasis role="bold">notrack</emphasis></term>
<listitem> <listitem>
<para>Allow traffic between the firewall and these hosts <para>The traffic will be exempted from connection
throughout '[re]start', 'stop' and 'clear'. Specifying tracking.</para>
<emphasis role="bold">critical</emphasis> on one or more
entries will cause your firewall to be "totally open" for a
brief window during each of those operations. Examples of
where you might want to use this are:</para>
<itemizedlist>
<listitem>
<para>'Ping' nodes with heartbeat.</para>
</listitem>
<listitem>
<para>LDAP server(s) if you use LDAP Authentication</para>
</listitem>
<listitem>
<para>NFS Server if you have an NFS-mounted root
filesystem.</para>
</listitem>
</itemizedlist>
</listitem> </listitem>
</varlistentry> </varlistentry>
</variablelist> </variablelist>