mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-20 09:47:51 +02:00
Add MULTICAST to shorewall.conf(5)
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7520 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
e8b1231f8a
commit
d00d455930
@ -240,6 +240,16 @@
|
|||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
|
|
||||||
|
<varlistentry>
|
||||||
|
<term><emphasis role="bold">BIGDPORTLISTS=</emphasis>[<emphasis
|
||||||
|
role="bold">Yes</emphasis>|<emphasis role="bold">No</emphasis>]</term>
|
||||||
|
|
||||||
|
<listitem>
|
||||||
|
<para>Setting this option to 'Yes' allows you to include arbitrarily
|
||||||
|
long destination port lists in all configuration files.</para>
|
||||||
|
</listitem>
|
||||||
|
</varlistentry>
|
||||||
|
|
||||||
<varlistentry>
|
<varlistentry>
|
||||||
<term><emphasis
|
<term><emphasis
|
||||||
role="bold">BLACKLIST_DISPOSITION=</emphasis>[<emphasis
|
role="bold">BLACKLIST_DISPOSITION=</emphasis>[<emphasis
|
||||||
@ -998,6 +1008,34 @@ net all DROP info</programlisting>then the chain name is 'net2all'
|
|||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
|
|
||||||
|
<varlistentry>
|
||||||
|
<term><emphasis role="bold">MULTICAST=</emphasis>[<emphasis
|
||||||
|
role="bold">Yes</emphasis>|<emphasis role="bold">No</emphasis>]</term>
|
||||||
|
|
||||||
|
<listitem>
|
||||||
|
<para>This option will normally be set to 'No' (the default). It
|
||||||
|
should be set to 'Yes' under the following circumstances:</para>
|
||||||
|
|
||||||
|
<orderedlist>
|
||||||
|
<listitem>
|
||||||
|
<para>You have an interface that has parallel zones defined via
|
||||||
|
/etc/shorewall/hosts.</para>
|
||||||
|
</listitem>
|
||||||
|
|
||||||
|
<listitem>
|
||||||
|
<para>You want to forward multicast packets to two or more of
|
||||||
|
those parallel zones.</para>
|
||||||
|
</listitem>
|
||||||
|
</orderedlist>
|
||||||
|
|
||||||
|
<para>In such cases, you will configure a <option>destonly</option>
|
||||||
|
network on each zone receiving multicasts.</para>
|
||||||
|
|
||||||
|
<para>The MULTICAST option is only recognized by Shorewall-perl and
|
||||||
|
is ignored by Shorewall-shell.</para>
|
||||||
|
</listitem>
|
||||||
|
</varlistentry>
|
||||||
|
|
||||||
<varlistentry>
|
<varlistentry>
|
||||||
<term><emphasis
|
<term><emphasis
|
||||||
role="bold">MUTEX_TIMEOUT=</emphasis>[<emphasis>seconds</emphasis>]</term>
|
role="bold">MUTEX_TIMEOUT=</emphasis>[<emphasis>seconds</emphasis>]</term>
|
||||||
|
Loading…
x
Reference in New Issue
Block a user