added legalnotice

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@872 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
mhnoyes 2003-12-16 22:41:02 +00:00
parent dc67568c50
commit e1579426dd
4 changed files with 82 additions and 53 deletions

View File

@ -1,7 +1,7 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN" <!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"> "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
<article> <article id="Shorewall_Doesnt">
<articleinfo> <articleinfo>
<title>Some Things that Shorewall Cannot Do</title> <title>Some Things that Shorewall Cannot Do</title>
@ -11,13 +11,22 @@
<surname>Eastep</surname> <surname>Eastep</surname>
</author> </author>
<pubdate>2003-10-07</pubdate>
<copyright> <copyright>
<year>2003</year> <year>2003</year>
<holder>Thomas M Eastep</holder> <holder>Thomas M Eastep</holder>
</copyright> </copyright>
<pubdate>2003-10-07</pubdate> <legalnotice>
<para>Permission is granted to copy, distribute and/or modify this
document under the terms of the GNU Free Documentation License, Version
1.2 or any later version published by the Free Software Foundation; with
no Invariant Sections, with no Front-Cover, and with no Back-Cover
Texts. A copy of the license is included in the section entitled &#34;<ulink
url="GnuCopyright.htm">GNU Free Documentation License</ulink>&#34;.</para>
</legalnotice>
</articleinfo> </articleinfo>
<section> <section>
@ -25,21 +34,21 @@
<itemizedlist> <itemizedlist>
<listitem> <listitem>
<para>Be used to filter traffic through a Layer 2 Bridge </para> <para>Be used to filter traffic through a Layer 2 Bridge</para>
</listitem> </listitem>
<listitem> <listitem>
<para>Act as a &#34;Personal Firewall&#34; that allows internet access <para>Act as a &#34;Personal Firewall&#34; that allows internet access
by application. </para> by application.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>Be used with an Operating System other than Linux (version <para>Be used with an Operating System other than Linux (version
&#62;= 2.4.0) </para> &#62;= 2.4.0)</para>
</listitem> </listitem>
<listitem> <listitem>
<para>Do content filtering: </para> <para>Do content filtering:</para>
<itemizedlist> <itemizedlist>
<listitem> <listitem>
@ -51,8 +60,7 @@
<para>Email -- Install something like <ulink <para>Email -- Install something like <ulink
url="http://www.postfix.org">Postfix</ulink> on your firewall and url="http://www.postfix.org">Postfix</ulink> on your firewall and
integrate it with <ulink url="http://www.spamassassin.org/">SpamAssassin</ulink> integrate it with <ulink url="http://www.spamassassin.org/">SpamAssassin</ulink>
and <ulink url="http://www.ijs.si/software/amavisd/">Amavisd-new</ulink>. and <ulink url="http://www.ijs.si/software/amavisd/">Amavisd-new</ulink>.</para>
</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
</listitem> </listitem>
@ -66,8 +74,7 @@
<listitem> <listitem>
<para>Shorewall does not contain any support for Netfilter <ulink <para>Shorewall does not contain any support for Netfilter <ulink
url="http://www.netfilter.org/documentation/pomlist/pom-summary.html">Patch-O-Matic</ulink> url="http://www.netfilter.org/documentation/pomlist/pom-summary.html">Patch-O-Matic</ulink>
features -- Shorewall only supports features from released kernels. features -- Shorewall only supports features from released kernels.</para>
</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
</section> </section>

View File

@ -1,7 +1,7 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN" <!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"> "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
<article> <article id="quotes">
<articleinfo> <articleinfo>
<title>Quotes from Users</title> <title>Quotes from Users</title>
@ -11,13 +11,22 @@
<surname>Eastep</surname> <surname>Eastep</surname>
</author> </author>
<pubdate>2003-07-01</pubdate>
<copyright> <copyright>
<year>2003</year> <year>2003</year>
<holder>Thomas M Eastep</holder> <holder>Thomas M Eastep</holder>
</copyright> </copyright>
<pubdate>2003-07-01</pubdate> <legalnotice>
<para>Permission is granted to copy, distribute and/or modify this
document under the terms of the GNU Free Documentation License, Version
1.2 or any later version published by the Free Software Foundation; with
no Invariant Sections, with no Front-Cover, and with no Back-Cover
Texts. A copy of the license is included in the section entitled &#34;<ulink
url="GnuCopyright.htm">GNU Free Documentation License</ulink>&#34;.</para>
</legalnotice>
</articleinfo> </articleinfo>
<section> <section>
@ -31,7 +40,7 @@
IPtables parser in shell and awk, which was a lot of fun but never got IPtables parser in shell and awk, which was a lot of fun but never got
me past the &#34;hey, cool&#34; stage. Then I discovered Shorewall. me past the &#34;hey, cool&#34; stage. Then I discovered Shorewall.
After about an hour, everything just worked. I am stunned, and very After about an hour, everything just worked. I am stunned, and very
grateful&#34; -- ES, Phoenix AZ, USA. </para> grateful&#34; -- ES, Phoenix AZ, USA.</para>
</listitem> </listitem>
<listitem> <listitem>
@ -39,7 +48,7 @@
easier than any of the other iptables-based firewall programs out easier than any of the other iptables-based firewall programs out
there. After sifting through many other scripts, it is obvious that there. After sifting through many other scripts, it is obvious that
yours is the most well thought-out and complete one available.&#34; -- yours is the most well thought-out and complete one available.&#34; --
BC, USA </para> BC, USA</para>
</listitem> </listitem>
<listitem> <listitem>
@ -69,27 +78,27 @@
<listitem> <listitem>
<para>Minutes instead of months! Congratulations and thanks for such a <para>Minutes instead of months! Congratulations and thanks for such a
simple and well documented thing for something as huge as simple and well documented thing for something as huge as
iptables.&#34; -- JV, Spain. </para> iptables.&#34; -- JV, Spain.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>&#34;I downloaded Shorewall 1.2.0 and installed it on Mandrake <para>&#34;I downloaded Shorewall 1.2.0 and installed it on Mandrake
8.1 without any problems. Your documentation is great and I really 8.1 without any problems. Your documentation is great and I really
appreciate your network configuration info. That really helped me out appreciate your network configuration info. That really helped me out
alot. THANKS!!!&#34; -- MM. </para> alot. THANKS!!!&#34; -- MM.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>&#34;[Shorewall is a] great, great project. I&#39;ve used/tested <para>&#34;[Shorewall is a] great, great project. I&#39;ve used/tested
may firewall scripts but this one is till now the best.&#34; -- B.R, may firewall scripts but this one is till now the best.&#34; -- B.R,
Netherlands </para> Netherlands</para>
</listitem> </listitem>
<listitem> <listitem>
<para>&#34;Never in my +12 year career as a sys admin have I witnessed <para>&#34;Never in my +12 year career as a sys admin have I witnessed
someone so relentless in developing a secure, state of the art, safe someone so relentless in developing a secure, state of the art, safe
and useful product as the Shorewall firewall package for no cost or and useful product as the Shorewall firewall package for no cost or
obligation involved.&#34; -- Mario Kerecki, Toronto </para> obligation involved.&#34; -- Mario Kerecki, Toronto</para>
</listitem> </listitem>
<listitem> <listitem>
@ -97,12 +106,12 @@
latest release 1.2.9 is working fine for me with SuSE Linux 7.3! I now latest release 1.2.9 is working fine for me with SuSE Linux 7.3! I now
have 7 machines up and running with shorewall on several versions - have 7 machines up and running with shorewall on several versions -
starting with 1.2.2 up to the new 1.2.9 and I never have encountered starting with 1.2.2 up to the new 1.2.9 and I never have encountered
any problems!&#34; -- SM, Germany </para> any problems!&#34; -- SM, Germany</para>
</listitem> </listitem>
<listitem> <listitem>
<para>&#34;You have the best support of any other package I&#39;ve <para>&#34;You have the best support of any other package I&#39;ve
ever used.&#34; -- SE, US </para> ever used.&#34; -- SE, US</para>
</listitem> </listitem>
<listitem> <listitem>
@ -112,33 +121,32 @@
security is a hot issue. We also make use of checkpoint firewalls, but security is a hot issue. We also make use of checkpoint firewalls, but
not all of the internet servers are guarded by checkpoint, some of not all of the internet servers are guarded by checkpoint, some of
them are running....Shorewall.&#34; -- Name withheld by request, them are running....Shorewall.&#34; -- Name withheld by request,
Europe </para> Europe</para>
</listitem> </listitem>
<listitem> <listitem>
<para>&#34;thanx for all your efforts you put into shorewall - this <para>&#34;thanx for all your efforts you put into shorewall - this
product stands out against a lot of commercial stuff i´ve been working product stands out against a lot of commercial stuff i´ve been working
with in terms of flexibillity, quality &#38; support&#34; -- RM, with in terms of flexibillity, quality &#38; support&#34; -- RM,
Austria </para> Austria</para>
</listitem> </listitem>
<listitem> <listitem>
<para>&#34;I have never seen such a complete firewall package that is <para>&#34;I have never seen such a complete firewall package that is
so easy to configure. I searched the Debian package system for so easy to configure. I searched the Debian package system for
firewall scripts and Shorewall won hands down.&#34; -- RG, Toronto firewall scripts and Shorewall won hands down.&#34; -- RG, Toronto</para>
</para>
</listitem> </listitem>
<listitem> <listitem>
<para>&#34;My respects... I&#39;ve just found and installed Shorewall <para>&#34;My respects... I&#39;ve just found and installed Shorewall
1.3.3-1 and it is a wonderful piece of software. I&#39;ve just sent 1.3.3-1 and it is a wonderful piece of software. I&#39;ve just sent
out an email to about 30 people recommending it. :-) </para> out an email to about 30 people recommending it. :-)</para>
<para>While I had previously taken the time (maybe 40 hours) to really <para>While I had previously taken the time (maybe 40 hours) to really
understand ipchains, then spent at least an hour per server understand ipchains, then spent at least an hour per server
customizing and carefully scrutinizing firewall rules, I&#39;ve got customizing and carefully scrutinizing firewall rules, I&#39;ve got
shorewall running on my home firewall, with rulesets and policies that shorewall running on my home firewall, with rulesets and policies that
I know make sense, in under 20 minutes.&#34; -- RP, Guatamala </para> I know make sense, in under 20 minutes.&#34; -- RP, Guatamala</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
</section> </section>

View File

@ -1,7 +1,7 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN" <!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"> "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
<article> <article id="shorewall_features">
<articleinfo> <articleinfo>
<title>Shorewall Features</title> <title>Shorewall Features</title>
@ -11,13 +11,22 @@
<surname>Eastep</surname> <surname>Eastep</surname>
</author> </author>
<pubdate>2003-11-13</pubdate>
<copyright> <copyright>
<year>2001-2003</year> <year>2001-2003</year>
<holder>Thomas M Eastep</holder> <holder>Thomas M Eastep</holder>
</copyright> </copyright>
<pubdate>2003-11-13</pubdate> <legalnotice>
<para>Permission is granted to copy, distribute and/or modify this
document under the terms of the GNU Free Documentation License, Version
1.2 or any later version published by the Free Software Foundation; with
no Invariant Sections, with no Front-Cover, and with no Back-Cover
Texts. A copy of the license is included in the section entitled &#34;<ulink
url="GnuCopyright.htm">GNU Free Documentation License</ulink>&#34;.</para>
</legalnotice>
</articleinfo> </articleinfo>
<section> <section>
@ -26,7 +35,7 @@
<itemizedlist> <itemizedlist>
<listitem> <listitem>
<para>Uses Netfilter&#39;s connection tracking facilities for stateful <para>Uses Netfilter&#39;s connection tracking facilities for stateful
packet filtering. </para> packet filtering.</para>
</listitem> </listitem>
<listitem> <listitem>
@ -35,11 +44,11 @@
<itemizedlist> <itemizedlist>
<listitem> <listitem>
<para>Completely customizable using configuration files. </para> <para>Completely customizable using configuration files.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>No limit on the number of network interfaces. </para> <para>No limit on the number of network interfaces.</para>
</listitem> </listitem>
<listitem> <listitem>
@ -54,7 +63,7 @@
</listitem> </listitem>
<listitem> <listitem>
<para>Supports nested and overlapping zones. </para> <para>Supports nested and overlapping zones.</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
</listitem> </listitem>
@ -62,25 +71,23 @@
<listitem> <listitem>
<para><ulink url="shorewall_quickstart_guide.htm">QuickStart Guides <para><ulink url="shorewall_quickstart_guide.htm">QuickStart Guides
(HOWTOs)</ulink> to help get your first firewall up and running (HOWTOs)</ulink> to help get your first firewall up and running
quickly </para> quickly</para>
</listitem> </listitem>
<listitem> <listitem>
<para>A <emphasis role="bold">GUI</emphasis> is available via Webmin <para>A <emphasis role="bold">GUI</emphasis> is available via Webmin
1.060 and later (<ulink url="http://www.webmin.com">http://www.webmin.com</ulink>) 1.060 and later (<ulink url="http://www.webmin.com">http://www.webmin.com</ulink>)</para>
</para>
</listitem> </listitem>
<listitem> <listitem>
<para>Extensive <ulink <para>Extensive <ulink
url="shorewall_quickstart_guide.htm#Documentation">documentation</ulink> url="shorewall_quickstart_guide.htm#Documentation">documentation</ulink>
included in the .tgz and .rpm downloads. </para> included in the .tgz and .rpm downloads.</para>
</listitem> </listitem>
<listitem> <listitem>
<para><emphasis role="bold">Flexible address management/routing <para><emphasis role="bold">Flexible address management/routing
support</emphasis> (and you can use all types in the same firewall): support</emphasis> (and you can use all types in the same firewall):</para>
</para>
<itemizedlist> <itemizedlist>
<listitem> <listitem>
@ -103,7 +110,7 @@
<listitem> <listitem>
<para><ulink role="bold" url="blacklisting_support.htm">Blacklisting</ulink> <para><ulink role="bold" url="blacklisting_support.htm">Blacklisting</ulink>
of individual IP addresses and subnetworks is supported. </para> of individual IP addresses and subnetworks is supported.</para>
</listitem> </listitem>
<listitem> <listitem>
@ -112,16 +119,16 @@
<itemizedlist> <itemizedlist>
<listitem> <listitem>
<para>Commands to start, stop and clear the firewall </para> <para>Commands to start, stop and clear the firewall</para>
</listitem> </listitem>
<listitem> <listitem>
<para>Supports status monitoring with an audible alarm when an <para>Supports status monitoring with an audible alarm when an
&#34;interesting&#34; packet is detected. </para> &#34;interesting&#34; packet is detected.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>Wide variety of informational commands. </para> <para>Wide variety of informational commands.</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
</listitem> </listitem>
@ -136,8 +143,7 @@
</listitem> </listitem>
<listitem> <listitem>
<para><ulink url="PPTP.htm">PPTP</ulink> clients and Servers. <para><ulink url="PPTP.htm">PPTP</ulink> clients and Servers.</para>
</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
</listitem> </listitem>
@ -155,20 +161,19 @@
<listitem> <listitem>
<para><ulink url="Install.htm#Install_RPM">RPM</ulink> and <ulink <para><ulink url="Install.htm#Install_RPM">RPM</ulink> and <ulink
url="http://idea.sec.dico.unimi.it/%7Elorenzo/index.html#Debian">Debian</ulink> url="http://idea.sec.dico.unimi.it/%7Elorenzo/index.html#Debian">Debian</ulink>
packages available. </para> packages available.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>Includes automated <ulink url="Install.htm">install, <para>Includes automated <ulink url="Install.htm">install,
upgrade, fallback and uninstall facilities</ulink> for users who upgrade, fallback and uninstall facilities</ulink> for users who
can&#39;t use or choose not to use the RPM or Debian packages. can&#39;t use or choose not to use the RPM or Debian packages.</para>
</para>
</listitem> </listitem>
<listitem> <listitem>
<para>Included as a standard part of <ulink <para>Included as a standard part of <ulink
url="http://leaf.sourceforge.net/devel/jnilo">LEAF/Bering</ulink> url="http://leaf.sourceforge.net/devel/jnilo">LEAF/Bering</ulink>
(router/firewall on a floppy, CD or compact flash). </para> (router/firewall on a floppy, CD or compact flash).</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
</listitem> </listitem>

View File

@ -1,7 +1,7 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN" <!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"> "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
<article> <article id="shorewall_prerequisites">
<articleinfo> <articleinfo>
<title>Shorewall Requirements</title> <title>Shorewall Requirements</title>
@ -11,13 +11,22 @@
<surname>Eastep</surname> <surname>Eastep</surname>
</author> </author>
<pubdate>2003-12-01</pubdate>
<copyright> <copyright>
<year>2001-2003</year> <year>2001-2003</year>
<holder>Thomas M Eastep</holder> <holder>Thomas M Eastep</holder>
</copyright> </copyright>
<pubdate>2003-12-01</pubdate> <legalnotice>
<para>Permission is granted to copy, distribute and/or modify this
document under the terms of the GNU Free Documentation License, Version
1.2 or any later version published by the Free Software Foundation; with
no Invariant Sections, with no Front-Cover, and with no Back-Cover
Texts. A copy of the license is included in the section entitled &#34;<ulink
url="GnuCopyright.htm">GNU Free Documentation License</ulink>&#34;.</para>
</legalnotice>
</articleinfo> </articleinfo>
<section> <section>