extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-20 09:47:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Hack to fix manpage formatting (looks bad in HTML now)

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7309 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-09-10 14:45:15 +00:00
parent a1cdcdbd12
commit ce46b2e214
2 changed files with 76 additions and 67 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
manpages/shorewall-modules.xml
View File

@ -43,7 +43,12 @@
<para>The /usr/share/shorewall/modules file contains a large number of
modules. Users are encouraged to copy the file to /etc/shorewall/modules
and modify the copy to load only the modules required.</para>
and modify the copy to load only the modules required.<note>
<para>If you build monolithic kernels and have not installed
module-init-tools, then create an empty /etc/shorewall/modules file;
that will prevent Shorewall from trying to load modules at all.
</para>
</note></para>
</refsect1>
<refsect1>

28
manpages/shorewall-rules.xml
View File

@ -618,7 +618,7 @@
intra-zone traffic is affected.</para>
<para>If the DEST <replaceable>zone</replaceable> is a bport zone,
then either:<itemizedlist>
then either:<orderedlist numeration="loweralpha">
<listitem>
<para>the SOURCE must be <option>all[+][-]</option>, or</para>
</listitem>
@ -632,11 +632,14 @@
<para>the SOURCE <replaceable>zone</replaceable> must be an
ipv4 zone that is associated with only the same bridge.</para>
</listitem>
</itemizedlist>Except when <emphasis
role="bold">all</emphasis>[<emphasis role="bold">+]|[-</emphasis>]
is specified, the server may be further restricted to a particular
network, host or interface by appending ":" and the network, host or
interface. See <emphasis role="bold">SOURCE</emphasis> above.</para>
</orderedlist></para>
<blockquote>
<para>Except when <emphasis role="bold">all</emphasis>[<emphasis
role="bold">+]|[-</emphasis>] is specified, the server may be
further restricted to a particular network, host or interface by
appending ":" and the network, host or interface. See <emphasis
role="bold">SOURCE</emphasis> above.</para>
<para>You may exclude certain hosts from the set already defined
through use of an <emphasis>exclusion</emphasis> (see <ulink
@ -663,8 +666,8 @@
addresses in the range in a round-robin fashion.</para>
<para>If you kernel and iptables have ipset match support then you
may give the name of an ipset prefaced by "+". The ipset name may be
optionally followed by a number from 1 to 6 enclosed in square
may give the name of an ipset prefaced by "+". The ipset name may
be optionally followed by a number from 1 to 6 enclosed in square
brackets ([]) to indicate the number of levels of destination
bindings to be matched. Only one of the <emphasis
role="bold">SOURCE</emphasis> and <emphasis
@ -693,13 +696,14 @@
</variablelist>
<blockquote>
<para>if the <emphasis role="bold">ACTION</emphasis> is <emphasis
role="bold">REDIRECT</emphasis> or <emphasis
<para>if the <emphasis role="bold">ACTION</emphasis> is
<emphasis role="bold">REDIRECT</emphasis> or <emphasis
role="bold">REDIRECT-</emphasis>, this column needs only to
contain the port number on the firewall that the request should be
redirected to. That is equivalent to specifying
contain the port number on the firewall that the request should
be redirected to. That is equivalent to specifying
<option>$FW</option>::<replaceable>port</replaceable>.</para>
</blockquote>
</blockquote>
</listitem>
</varlistentry>