extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-27 01:53:27 +01:00
Code Issues Packages Projects Releases Wiki Activity

More /proc vs wildcard warnings

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5984 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-04-17 21:54:47 +00:00
parent d7f5925bc4
commit cffa16852b
1 changed files with 24 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
docs/Documentation.xml
View File

@ -646,6 +646,12 @@ child:parnt1,parnt2 ipv4</programlisting>
the single HUB/Switch should have this option specified). Note the single HUB/Switch should have this option specified). Note
that using such a configuration in a production environment is that using such a configuration in a production environment is
strongly recommended against.</para> strongly recommended against.</para>
<note>
<para>This option does not work with a wild-card
<replaceable>interface</replaceable> name (e.g., eth0.+) in
the INTERFACE column.</para>
</note>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -675,7 +681,11 @@ child:parnt1,parnt2 ipv4</programlisting>
<para>If no &lt;<emphasis>number</emphasis>&gt; is given then <para>If no &lt;<emphasis>number</emphasis>&gt; is given then
the value 1 is assumed</para> the value 1 is assumed</para>
<para><warning> <para><note>
<para>This option does not work with a wild-card
<replaceable>interface</replaceable> name (e.g., eth0.+)
in the INTERFACE column.</para>
</note><warning>
<para><emphasis role="bold">DO NOT SPECIFY arp_ignore FOR <para><emphasis role="bold">DO NOT SPECIFY arp_ignore FOR
ANY INTERFACE INVOLVED IN PROXY ARP</emphasis>.</para> ANY INTERFACE INVOLVED IN PROXY ARP</emphasis>.</para>
</warning></para> </warning></para>
@ -763,6 +773,12 @@ child:parnt1,parnt2 ipv4</programlisting>
would be routed outbound through another interface on the would be routed outbound through another interface on the
firewall.</para> firewall.</para>
<note>
<para>This option does not work with a wild-card
<replaceable>interface</replaceable> name (e.g., eth0.+) in
the INTERFACE column.</para>
</note>
<warning> <warning>
<para>If you specify this option for an interface then the <para>If you specify this option for an interface then the
interface must be up prior to starting the firewall.</para> interface must be up prior to starting the firewall.</para>
@ -833,6 +849,12 @@ child:parnt1,parnt2 ipv4</programlisting>
(/proc/sys/net/ipv4/conf/&lt;<emphasis>interface</emphasis>&gt;/log_martians (/proc/sys/net/ipv4/conf/&lt;<emphasis>interface</emphasis>&gt;/log_martians
will be set to 1). See also the LOG_MARTIANS option in <link will be set to 1). See also the LOG_MARTIANS option in <link
linkend="Conf">shorewall.conf</link>.</para> linkend="Conf">shorewall.conf</link>.</para>
<note>
<para>This option does not work with a wild-card
<replaceable>interface</replaceable> name (e.g., eth0.+) in
the INTERFACE column.</para>
</note>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -4412,4 +4434,4 @@ eth1 -</programlisting>
<para>This file is described in the <ulink url="Accounting.html">Traffic <para>This file is described in the <ulink url="Accounting.html">Traffic
Accounting Documentation</ulink>.</para> Accounting Documentation</ulink>.</para>
</section> </section>
</article> </article>