diff --git a/Shorewall-core/lib.cli b/Shorewall-core/lib.cli index f6da9b048..6d3db9dba 100644 --- a/Shorewall-core/lib.cli +++ b/Shorewall-core/lib.cli @@ -4474,6 +4474,14 @@ shorewall_cli() { fi option=${option#4} ;; + l*) + if [ "$PRODUCT" = shorewall ]; then + PRODUCT=shorewall-lite + elif [ "$PRODUCT" = shorewall6 ]; then + PRODUCT=shorewall6-lite + fi + option=${option#l} + ;; -) finished=1 option= diff --git a/Shorewall/manpages/shorewall.xml b/Shorewall/manpages/shorewall.xml index e1da7b224..0f6bf9fa2 100644 --- a/Shorewall/manpages/shorewall.xml +++ b/Shorewall/manpages/shorewall.xml @@ -898,11 +898,54 @@ include shorewall commands in /etc/shorewall/started. - The options control the amount of output that - the command produces. They consist of a sequence of the letters v and q. If the - options are omitted, the amount of output is determined by the setting of - the VERBOSITY parameter in Beginning with Shorewall 5.0.15, the shorewall + command may also be used to control Shorewall6, Shorewall-lite and + Shorewall6-lite. + + + + When the Shorewall package is installed, then + shorewall command defaults to that product. + + + + When the Shorewall package is not installed but Shorewall-lite + is installed, the shorewall command defaults to + Shorewall-lite. + + + + When neither the Shorewall nor Shorewall-lite package is + installed but Shorewall6-lite is installed, the + shorewall command defaults to + Shorewall6-lite. + + + + When the Shorewall6 package is installed, the + option is used to cause shorewall commands to operate on the Shorewall6 + configuration. In other words, "shorewall -6 ..." is + equivalent to "shorewall6 ...". + + Similarly, when Shorewall is not installed but both Shorewall-lite + and Shorewall6-lite are installed, the option causes + shorewall commands to operate on the Shorewall6-lite + configuration. + + Finally, when both the standard product (Shorewall or Shorewall6) + and the corresponding -lite product(s) are installed, the + option causes shorewall commands to + operate on the -lite configuration rather than the standard configuration. + In other words "shorewall -l ..." is equivalent to + "shorewall-lite -l ..." and "shorewall -6l + ..." is equivalent to "shorewall6-lite + ...". + + The remaining options control the amount of + output that the command produces. They consist of a sequence of the + letters v and q. If the options are omitted, the amount of output + is determined by the setting of the VERBOSITY parameter in shorewall.conf(5). Each v adds one to the effective verbosity and each q subtracts one from the effective @@ -2628,7 +2671,7 @@ Because the translation of the 'blacklist' and 'routestopped' files is not 1:1, omitted lines and compiler directives are not transferred to the converted files. If - either are present, the compiler issues a warning: + either are present, the compiler issues a warning: WARNING: "Omitted rules and compiler directives were not translated