extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-23 06:38:53 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add another restriction for SAVE_IPSETS=Yes

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2017-11-08 10:56:57 -08:00
parent 832418585a
commit d3eebde464
No known key found for this signature in database
GPG Key ID: 96E6B3F2423A4D10
1 changed files with 12 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
docs/ipsets.xml
View File

@ -56,12 +56,13 @@
<ulink url="http://xtables-addons.sourceforge.net/">xtables-addons</ulink>
if they are not available in your current distribution. Instructions for
installing xtables-addons may be found in the <ulink
url="Dynamic.html">Dynamic Zones article</ulink>.
Note that xtables-addons might not be required
with the 'ipset' package provided by your distribution.
See also the section <ulink url="configuration_file_basics.htm#capabilities">capabilities</ulink>
in the <ulink url="configuration_file_basics.htm">configuration file basics article</ulink>
and the <ulink url="Shorewall-Lite.html#Shorecap">Shorecap program</ulink>.</para>
url="Dynamic.html">Dynamic Zones article</ulink>. Note that xtables-addons
might not be required with the 'ipset' package provided by your
distribution. See also the section <ulink
url="configuration_file_basics.htm#capabilities">capabilities</ulink> in
the <ulink url="configuration_file_basics.htm">configuration file basics
article</ulink> and the <ulink url="Shorewall-Lite.html#Shorecap">Shorecap
program</ulink>.</para>
<para>Ipset allows you to create one or more named sets of addresses then
use those sets to define Netfilter/iptables rules. Possible uses of ipsets
@ -151,6 +152,11 @@ ACCEPT net:+sshok $FW tcp 22</programlisting></para>
url="manpages/shorewall.conf.html">shorewall.conf</ulink> (5).</para>
</listitem>
<listitem>
<para>You must have at least one entry in the other configuration
files that uses an ipset.</para>
</listitem>
<listitem>
<para>You cannot use an ipset in <ulink
url="manpages/shorewall-stoppedulres.html">shorewall-stoppedrules</ulink>