Fix tcrules manapges WRT source/dest ports

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-06-08 09:03:08 -07:00
parent 35d1586672
commit d6ebdd3cb7
2 changed files with 15 additions and 7 deletions

View File

@ -533,9 +533,9 @@ SAME $FW 0.0.0.0/0 tcp 80,443</programlisting>
If no PORT is given, <emphasis role="bold">ipp2p</emphasis> is If no PORT is given, <emphasis role="bold">ipp2p</emphasis> is
assumed.</para> assumed.</para>
<para>This column is ignored if PROTOCOL = all but must be entered <para>An entry in this field requires that the PROTO column specify
if any of the following field is supplied. In that case, it is icmp (1), tcp (6), udp (17), sctp (132) or udplite (136). Use '-' if
suggested that this field contain "-"</para> any of the following field is supplied.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -549,6 +549,10 @@ SAME $FW 0.0.0.0/0 tcp 80,443</programlisting>
<para>Source port(s). If omitted, any source port is acceptable. <para>Source port(s). If omitted, any source port is acceptable.
Specified as a comma-separated list of port names, port numbers or Specified as a comma-separated list of port names, port numbers or
port ranges.</para> port ranges.</para>
<para>An entry in this field requires that the PROTO column specify
tcp (6), udp (17), sctp (132) or udplite (136). Use '-' if any of
the following fields is supplied.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>

View File

@ -388,7 +388,7 @@ SAME $FW 0.0.0.0/0 tcp 80,443</programlisting>
<para>Destination Ports. A comma-separated list of Port names (from <para>Destination Ports. A comma-separated list of Port names (from
services(5)), <emphasis>port number</emphasis>s or <emphasis>port services(5)), <emphasis>port number</emphasis>s or <emphasis>port
range</emphasis>s; if the protocol is <emphasis range</emphasis>s; if the protocol is <emphasis
role="bold">icmp</emphasis>, this column is interpreted as the role="bold">ipv6-icmp</emphasis>, this column is interpreted as the
destination icmp-type(s). ICMP types may be specified as a numeric destination icmp-type(s). ICMP types may be specified as a numeric
type, a numberic type and code separated by a slash (e.g., 3/4), or type, a numberic type and code separated by a slash (e.g., 3/4), or
a typename. See <ulink a typename. See <ulink
@ -400,9 +400,9 @@ SAME $FW 0.0.0.0/0 tcp 80,443</programlisting>
If no PORT is given, <emphasis role="bold">ipp2p</emphasis> is If no PORT is given, <emphasis role="bold">ipp2p</emphasis> is
assumed.</para> assumed.</para>
<para>This column is ignored if PROTOCOL = all but must be entered <para>An entry in this field requires that the PROTO column specify
if any of the following field is supplied. In that case, it is tcp (6), udp (17), ipv6-icmp (58), sctp (132) or udplite (136). Use
suggested that this field contain "-"</para> '-' if any of the following field is supplied.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -416,6 +416,10 @@ SAME $FW 0.0.0.0/0 tcp 80,443</programlisting>
<para>Source port(s). If omitted, any source port is acceptable. <para>Source port(s). If omitted, any source port is acceptable.
Specified as a comma-separated list of port names, port numbers or Specified as a comma-separated list of port names, port numbers or
port ranges.</para> port ranges.</para>
<para>An entry in this field requires that the PROTO column specify
tcp (6), udp (17), sctp (132) or udplite (136). Use '-' if any of
the following fields is supplied.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>