From ec9a9c790e60cd18a305bed83b9045efe92a806d Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Wed, 19 Sep 2007 20:51:57 +0000
Subject: [PATCH] Add Ubuntu/Debian warning to 'match' option

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7368 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 docs/MultiISP.xml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/docs/MultiISP.xml b/docs/MultiISP.xml
index 1f97c8554..18f4b7bfd 100644
--- a/docs/MultiISP.xml
+++ b/docs/MultiISP.xml
@@ -302,8 +302,11 @@
                   'balance' (see below).</para>
 
                   <para>Use of this feature requires that your kernel and
-                  iptables support CONNMARK target and connmark match support.
-                  It does not require the ROUTE target extension.</para>
+                  iptables include CONNMARK target and connmark match support
+                  (<emphasis role="bold">Warning</emphasis>: Standard
+                  <trademark>Debian</trademark> and
+                  <trademark>Ubuntu</trademark> kernels are lacking that
+                  support!).</para>
 
                   <warning>
                     <para>A <emphasis role="bold">bug</emphasis> in Shorewall
@@ -458,7 +461,7 @@
             INTERFACE column plus the interfaces listed in this column.
             Normally, you will list all interfaces on your firewall in this
             column except those internet interfaces specified in the INTERFACE
-            column of entries in this file. </para>
+            column of entries in this file.</para>
           </listitem>
         </varlistentry>
       </variablelist>