mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-18 15:46:55 +02:00
Update location of Announcements Mailing List
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2232 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
88df7154f8
commit
d2b58f70ca
@ -70,7 +70,9 @@ Must be listed in</span><span style="font-family: monospace;">
|
|||||||
GATEWAY The IP address
|
GATEWAY The IP address
|
||||||
of the provider's gateway router.</span><span
|
of the provider's gateway router.</span><span
|
||||||
style="font-family: monospace;"> If you enter "detect" here then
|
style="font-family: monospace;"> If you enter "detect" here then
|
||||||
Shorewall will</span><span style="font-family: monospace;"> attempt to
|
Shorewall<br>
|
||||||
|
|
||||||
|
will</span><span style="font-family: monospace;"> attempt to
|
||||||
determine the gateway IP address</span><span
|
determine the gateway IP address</span><span
|
||||||
style="font-family: monospace;"> automatically.</span><br
|
style="font-family: monospace;"> automatically.</span><br
|
||||||
style="font-family: monospace;">
|
style="font-family: monospace;">
|
||||||
@ -84,39 +86,49 @@ comma-separated list selected from the</span><span
|
|||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
track If specified, connections FROM this interface are</span><span
|
track If specified, connections FROM this interface are</span><span
|
||||||
style="font-family: monospace;"> to be tracked so that responses may
|
style="font-family: monospace;"> to be tracked so that responses may
|
||||||
be routed</span><span style="font-family: monospace;"> back out this
|
be<br>
|
||||||
|
|
||||||
|
routed</span><span style="font-family: monospace;"> back out this
|
||||||
same interface.</span><br style="font-family: monospace;">
|
same interface.</span><br style="font-family: monospace;">
|
||||||
<br style="font-family: monospace;">
|
<br style="font-family: monospace;">
|
||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
You want specify 'track' if internet hosts will be</span><span
|
You want specify 'track' if internet hosts will be</span><span
|
||||||
style="font-family: monospace;"> connecting to local servers through
|
style="font-family: monospace;"> connecting to local servers through<br>
|
||||||
|
|
||||||
this</span><span style="font-family: monospace;"> provider.</span><br
|
this</span><span style="font-family: monospace;"> provider.</span><br
|
||||||
style="font-family: monospace;">
|
style="font-family: monospace;">
|
||||||
<br style="font-family: monospace;">
|
<br style="font-family: monospace;">
|
||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
Because of limitations in the 'ip' utility and</span><span
|
Because of limitations in the 'ip' utility and</span><span
|
||||||
style="font-family: monospace;"> policy routing, you may not use the
|
style="font-family: monospace;"> policy routing, you may not use the
|
||||||
SAVE or</span><span style="font-family: monospace;"> RESTORE tcrules
|
SAVE or</span><span style="font-family: monospace;"><br>
|
||||||
|
|
||||||
|
RESTORE tcrules
|
||||||
options or use connection</span><span style="font-family: monospace;">
|
options or use connection</span><span style="font-family: monospace;">
|
||||||
marking on any traffic to or from this</span><br
|
marking on any traffic to or from this</span><br
|
||||||
style="font-family: monospace;">
|
style="font-family: monospace;">
|
||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
interface. For traffic control purposes, you</span><span
|
interface. For traffic control purposes, you</span><span
|
||||||
style="font-family: monospace;"> must mark packets in the FORWARD
|
style="font-family: monospace;"> must mark packets in the FORWARD
|
||||||
chain (or</span><span style="font-family: monospace;"> better yet, use
|
chain (or</span><span style="font-family: monospace;"><br>
|
||||||
|
|
||||||
|
better yet, use
|
||||||
the CLASSIFY target).</span><br style="font-family: monospace;">
|
the CLASSIFY target).</span><br style="font-family: monospace;">
|
||||||
<br style="font-family: monospace;">
|
<br style="font-family: monospace;">
|
||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
balance The providers that have 'balance' specified will</span><span
|
balance The providers that have 'balance' specified will</span><span
|
||||||
style="font-family: monospace;"> get outbound traffic load-balanced
|
style="font-family: monospace;"> get outbound traffic load-balanced
|
||||||
among them. By</span><span style="font-family: monospace;"> default,
|
among<br>
|
||||||
|
|
||||||
|
them. By</span><span style="font-family: monospace;"> default,
|
||||||
all interfaces with 'balance' specified</span><span
|
all interfaces with 'balance' specified</span><span
|
||||||
style="font-family: monospace;"> will have the same
|
style="font-family: monospace;"> will have the same
|
||||||
weight <br>
|
weight (1).<br>
|
||||||
|
|
||||||
(1). You can change the</span><span style="font-family: monospace;">
|
You can change the</span><span style="font-family: monospace;">
|
||||||
weight of the route out of the interface by</span><span
|
weight of the route out of the interface by</span><span
|
||||||
style="font-family: monospace;"> specifiying balance=<weight>
|
style="font-family: monospace;"> specifiying balance=<weight><br>
|
||||||
|
|
||||||
where <weight> is</span><span style="font-family: monospace;">
|
where <weight> is</span><span style="font-family: monospace;">
|
||||||
the desired route weight.</span><br style="font-family: monospace;">
|
the desired route weight.</span><br style="font-family: monospace;">
|
||||||
<br style="font-family: monospace;">
|
<br style="font-family: monospace;">
|
||||||
@ -133,14 +145,14 @@ Squid 1
|
|||||||
-
|
-
|
||||||
eth2 192.168.2.99 -</span><br>
|
eth2 192.168.2.99 -</span><br>
|
||||||
<br>
|
<br>
|
||||||
Use of this feature requires that your kernel and iptabls
|
Use of this feature requires that your kernel and iptabls
|
||||||
support CONNMARK target and conntrack match support. It does NOT
|
support CONNMARK target and conntrack match support. It does NOT
|
||||||
require the ROUTE target extension.<br>
|
require the ROUTE target extension.<br>
|
||||||
<br>
|
<br>
|
||||||
WARNING: The current version of iptables (1.3.1) is broken
|
WARNING: The current version of iptables (1.3.1) is broken
|
||||||
with respect to CONNMARK and iptables-save/iptables-restore. This means
|
with respect to CONNMARK and iptables-save/iptables-restore. This means
|
||||||
that if you configure multiple ISPs, "shorewall restore" may<br>
|
that if you configure multiple ISPs, "shorewall restore" may fail. You
|
||||||
fail. You must patch your iptables using the patch at <a
|
must patch your iptables using the patch at <a
|
||||||
href="http://shorewall.net/pub/shorewall/contrib/iptables/CONNMARK.diff">http://shorewall.net/pub/shorewall/contrib/iptables/CONNMARK.diff</a>.<br>
|
href="http://shorewall.net/pub/shorewall/contrib/iptables/CONNMARK.diff">http://shorewall.net/pub/shorewall/contrib/iptables/CONNMARK.diff</a>.<br>
|
||||||
<br>
|
<br>
|
||||||
</li>
|
</li>
|
||||||
@ -393,24 +405,30 @@ and an address or address range.</span><br
|
|||||||
PROTO
|
PROTO
|
||||||
Protocol - Must be "tcp", "udp", "icmp",</span><span
|
Protocol - Must be "tcp", "udp", "icmp",</span><span
|
||||||
style="font-family: monospace;"> "ipp2p", a number, or "all". "ipp2p"
|
style="font-family: monospace;"> "ipp2p", a number, or "all". "ipp2p"
|
||||||
requires</span><span style="font-family: monospace;"> ipp2p match
|
requires</span><span style="font-family: monospace;"><br>
|
||||||
|
|
||||||
|
ipp2p match
|
||||||
support in your kernel and</span><span style="font-family: monospace;">
|
support in your kernel and</span><span style="font-family: monospace;">
|
||||||
iptables.</span><br style="font-family: monospace;">
|
iptables.</span><br style="font-family: monospace;">
|
||||||
<br style="font-family: monospace;">
|
<br style="font-family: monospace;">
|
||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
PORT(S) Destination
|
PORT(S) Destination
|
||||||
Ports. A comma-separated list of</span><span
|
Ports. A comma-separated list of</span><span
|
||||||
style="font-family: monospace;"> Port names (from /etc/services), port
|
style="font-family: monospace;"> Port names (from /etc/services), port<br>
|
||||||
|
|
||||||
numbers</span><span style="font-family: monospace;"> or port ranges; if
|
numbers</span><span style="font-family: monospace;"> or port ranges; if
|
||||||
the protocol is "icmp", this</span><span style="font-family: monospace;">
|
the protocol is "icmp", this</span><span style="font-family: monospace;">
|
||||||
column is interpreted as the destination</span><span
|
column is interpreted as the<br>
|
||||||
style="font-family: monospace;"> icmp-type(s).</span><br
|
|
||||||
|
destination</span><span style="font-family: monospace;"> icmp-type(s).</span><br
|
||||||
style="font-family: monospace;">
|
style="font-family: monospace;">
|
||||||
<br style="font-family: monospace;">
|
<br style="font-family: monospace;">
|
||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
If the protocol is ipp2p, this column is</span><span
|
If the protocol is ipp2p, this column is</span><span
|
||||||
style="font-family: monospace;"> interpreted as an ipp2p option
|
style="font-family: monospace;"> interpreted as an ipp2p option
|
||||||
without the</span><span style="font-family: monospace;"> leading "--"
|
without the</span><span style="font-family: monospace;"><br>
|
||||||
|
|
||||||
|
leading "--"
|
||||||
(example "bit" for bit-torrent).</span><span
|
(example "bit" for bit-torrent).</span><span
|
||||||
style="font-family: monospace;"> If no PORT is given, "ipp2p" is
|
style="font-family: monospace;"> If no PORT is given, "ipp2p" is
|
||||||
assumed.</span><br style="font-family: monospace;">
|
assumed.</span><br style="font-family: monospace;">
|
||||||
@ -418,7 +436,9 @@ assumed.</span><br style="font-family: monospace;">
|
|||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
This column is ignored if PROTOCOL = all but</span><span
|
This column is ignored if PROTOCOL = all but</span><span
|
||||||
style="font-family: monospace;"> must be entered if any of the
|
style="font-family: monospace;"> must be entered if any of the
|
||||||
following field</span><span style="font-family: monospace;"> is
|
following<br>
|
||||||
|
|
||||||
|
field</span><span style="font-family: monospace;"> is
|
||||||
supplied. In that case, it is suggested that</span><span
|
supplied. In that case, it is suggested that</span><span
|
||||||
style="font-family: monospace;"> this field contain "-"</span><br
|
style="font-family: monospace;"> this field contain "-"</span><br
|
||||||
style="font-family: monospace;">
|
style="font-family: monospace;">
|
||||||
@ -426,7 +446,8 @@ supplied. In that case, it is suggested that</span><span
|
|||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
SOURCE PORT(S) (Optional) Source port(s). If omitted,</span><span
|
SOURCE PORT(S) (Optional) Source port(s). If omitted,</span><span
|
||||||
style="font-family: monospace;"> any source port is acceptable.
|
style="font-family: monospace;"> any source port is acceptable.
|
||||||
Specified as a</span><span style="font-family: monospace;">
|
Specified as a</span><span style="font-family: monospace;"><br>
|
||||||
|
|
||||||
comma-separated list of port names, port</span><span
|
comma-separated list of port names, port</span><span
|
||||||
style="font-family: monospace;"> numbers or port ranges.</span><br
|
style="font-family: monospace;"> numbers or port ranges.</span><br
|
||||||
style="font-family: monospace;">
|
style="font-family: monospace;">
|
||||||
@ -440,7 +461,9 @@ Defines a test on the existing packet or</span><span
|
|||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
The rule will match only if the test returns</span><span
|
The rule will match only if the test returns</span><span
|
||||||
style="font-family: monospace;"> true. Tests have the format</span><span
|
style="font-family: monospace;"> true. Tests have the format</span><span
|
||||||
style="font-family: monospace;"> [!]<value>[/<mask>][:C]</span><br
|
style="font-family: monospace;"><br>
|
||||||
|
|
||||||
|
[!]<value>[/<mask>][:C]</span><br
|
||||||
style="font-family: monospace;">
|
style="font-family: monospace;">
|
||||||
<br style="font-family: monospace;">
|
<br style="font-family: monospace;">
|
||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
@ -449,8 +472,9 @@ Where:</span><br style="font-family: monospace;">
|
|||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
! Inverts the test (not equal)</span><span
|
! Inverts the test (not equal)</span><span
|
||||||
style="font-family: monospace;"> <value> Value of the packet or</span><span
|
style="font-family: monospace;"> <value> Value of the packet or</span><span
|
||||||
style="font-family: monospace;"> connection mark.</span><br
|
style="font-family: monospace;"><br>
|
||||||
style="font-family: monospace;">
|
|
||||||
|
connection mark.</span><br style="font-family: monospace;">
|
||||||
<br style="font-family: monospace;">
|
<br style="font-family: monospace;">
|
||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
<mask> A mask to be applied to the</span><span
|
<mask> A mask to be applied to the</span><span
|
||||||
@ -459,16 +483,21 @@ Where:</span><br style="font-family: monospace;">
|
|||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
:C Designates a connection</span><span
|
:C Designates a connection</span><span
|
||||||
style="font-family: monospace;"> mark. If omitted, the packet</span><span
|
style="font-family: monospace;"> mark. If omitted, the packet</span><span
|
||||||
style="font-family: monospace;"> mark's value is tested.</span><br
|
style="font-family: monospace;"> mark's value<br>
|
||||||
style="font-family: monospace;">
|
|
||||||
|
is tested.</span><br style="font-family: monospace;">
|
||||||
<br style="font-family: monospace;">
|
<br style="font-family: monospace;">
|
||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
INTERFACE The interface that the
|
INTERFACE The interface that the
|
||||||
packet is to be routed</span><span style="font-family: monospace;"> out
|
packet is to be routed</span><span style="font-family: monospace;"> out
|
||||||
of. If you do not specify this field then</span><span
|
of. If you do not specify this<br>
|
||||||
style="font-family: monospace;"> you must place "-" in this column and
|
|
||||||
|
field then</span><span style="font-family: monospace;"> you must place
|
||||||
|
"-" in this column and
|
||||||
enter an</span><span style="font-family: monospace;"> IP address in the
|
enter an</span><span style="font-family: monospace;"> IP address in the
|
||||||
GATEWAY column.</span><br style="font-family: monospace;">
|
GATEWAY<br>
|
||||||
|
|
||||||
|
column.</span><br style="font-family: monospace;">
|
||||||
<br style="font-family: monospace;">
|
<br style="font-family: monospace;">
|
||||||
<span style="font-family: monospace;">
|
<span style="font-family: monospace;">
|
||||||
GATEWAY The gateway
|
GATEWAY The gateway
|
||||||
|
@ -27,7 +27,7 @@ Documentation License</a></span>
|
|||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
<div>
|
<div>
|
||||||
<p class="pubdate">2005-03-05<br>
|
<p class="pubdate">2005-06-14<br>
|
||||||
</p>
|
</p>
|
||||||
<hr style="width: 100%; height: 2px;">
|
<hr style="width: 100%; height: 2px;">
|
||||||
<h2>See the <a target="_top" href="http://shorewall.net/">Shorewall
|
<h2>See the <a target="_top" href="http://shorewall.net/">Shorewall
|
||||||
@ -168,13 +168,13 @@ the Shorewall community. <big><span style="color: rgb(255, 0, 0);"><span
|
|||||||
OR ASKING FOR HELP.</span></span></big><br>
|
OR ASKING FOR HELP.</span></span></big><br>
|
||||||
</p>
|
</p>
|
||||||
<p align="left">To subscribe: <a
|
<p align="left">To subscribe: <a
|
||||||
href="https://lists.shorewall.net/mailman/listinfo/shorewall-announce"
|
href="http://lists.sourceforge.net/mailman/listinfo/shorewall-announce"
|
||||||
target="_top">https://lists.shorewall.net/mailman/listinfo/shorewall-announce</a>.
|
target="_top">http://lists.sourceforge.net/mailman/listinfo/shorewall-announce</a>.
|
||||||
</p>
|
</p>
|
||||||
<ul>
|
<ul>
|
||||||
</ul>
|
</ul>
|
||||||
The list archives are at <a
|
The list archives are at <a
|
||||||
href="http://lists.shorewall.net/pipermail/shorewall-announce">http://lists.shorewall.net/pipermail/shorewall-announce</a>.
|
href="http://sourceforge.net/mailarchive/forum.php?forum_id=45422">http://sourceforge.net/mailarchive/forum.php?forum_id=45422</a>.
|
||||||
<hr style="width: 100%; height: 2px;">
|
<hr style="width: 100%; height: 2px;">
|
||||||
<h2 align="left"><a name="Devel"></a>Shorewall Development Mailing List</h2>
|
<h2 align="left"><a name="Devel"></a>Shorewall Development Mailing List</h2>
|
||||||
<p align="left">The Shorewall Development Mailing list provides a forum
|
<p align="left">The Shorewall Development Mailing list provides a forum
|
||||||
|
Loading…
x
Reference in New Issue
Block a user