mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-27 01:53:27 +01:00
More /proc vs wildcard warnings
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5984 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
d7f5925bc4
commit
cffa16852b
@ -646,6 +646,12 @@ child:parnt1,parnt2 ipv4</programlisting>
|
||||
the single HUB/Switch should have this option specified). Note
|
||||
that using such a configuration in a production environment is
|
||||
strongly recommended against.</para>
|
||||
|
||||
<note>
|
||||
<para>This option does not work with a wild-card
|
||||
<replaceable>interface</replaceable> name (e.g., eth0.+) in
|
||||
the INTERFACE column.</para>
|
||||
</note>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
@ -675,7 +681,11 @@ child:parnt1,parnt2 ipv4</programlisting>
|
||||
<para>If no <<emphasis>number</emphasis>> is given then
|
||||
the value 1 is assumed</para>
|
||||
|
||||
<para><warning>
|
||||
<para><note>
|
||||
<para>This option does not work with a wild-card
|
||||
<replaceable>interface</replaceable> name (e.g., eth0.+)
|
||||
in the INTERFACE column.</para>
|
||||
</note><warning>
|
||||
<para><emphasis role="bold">DO NOT SPECIFY arp_ignore FOR
|
||||
ANY INTERFACE INVOLVED IN PROXY ARP</emphasis>.</para>
|
||||
</warning></para>
|
||||
@ -763,6 +773,12 @@ child:parnt1,parnt2 ipv4</programlisting>
|
||||
would be routed outbound through another interface on the
|
||||
firewall.</para>
|
||||
|
||||
<note>
|
||||
<para>This option does not work with a wild-card
|
||||
<replaceable>interface</replaceable> name (e.g., eth0.+) in
|
||||
the INTERFACE column.</para>
|
||||
</note>
|
||||
|
||||
<warning>
|
||||
<para>If you specify this option for an interface then the
|
||||
interface must be up prior to starting the firewall.</para>
|
||||
@ -833,6 +849,12 @@ child:parnt1,parnt2 ipv4</programlisting>
|
||||
(/proc/sys/net/ipv4/conf/<<emphasis>interface</emphasis>>/log_martians
|
||||
will be set to 1). See also the LOG_MARTIANS option in <link
|
||||
linkend="Conf">shorewall.conf</link>.</para>
|
||||
|
||||
<note>
|
||||
<para>This option does not work with a wild-card
|
||||
<replaceable>interface</replaceable> name (e.g., eth0.+) in
|
||||
the INTERFACE column.</para>
|
||||
</note>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
@ -4412,4 +4434,4 @@ eth1 -</programlisting>
|
||||
<para>This file is described in the <ulink url="Accounting.html">Traffic
|
||||
Accounting Documentation</ulink>.</para>
|
||||
</section>
|
||||
</article>
|
||||
</article>
|
Loading…
Reference in New Issue
Block a user