From 010c44d07a0e2a7c8d65567b4234a74649357dcb Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Mon, 18 Feb 2013 11:33:19 -0800 Subject: [PATCH] Correct description of the 'sourceroute' interface option. Signed-off-by: Tom Eastep --- Shorewall/manpages/shorewall-interfaces.xml | 9 +++------ Shorewall6/manpages/shorewall6-interfaces.xml | 9 ++++----- 2 files changed, 7 insertions(+), 11 deletions(-) diff --git a/Shorewall/manpages/shorewall-interfaces.xml b/Shorewall/manpages/shorewall-interfaces.xml index 88dfa12b0..45aeb0dbb 100644 --- a/Shorewall/manpages/shorewall-interfaces.xml +++ b/Shorewall/manpages/shorewall-interfaces.xml @@ -675,10 +675,9 @@ loc eth2 - If this option is not specified for an interface, then source-routed packets will not be accepted from that interface - (sets - /proc/sys/net/ipv4/conf/interface/accept_source_route - to 1). Only set this option if you know what you are doing. - This might represent a security risk and is usually + unless it has been explicitly enabled via sysconf. Only set + this option to 1 (enable source routing) if you know what you + are doing. This might represent a security risk and is usually unneeded. Only those interfaces with the @@ -686,8 +685,6 @@ loc eth2 - changed; the value assigned to the setting will be the value specified (if any) or 1 if no value is given. - - This option does not work with a wild-card interface name (e.g., eth0.+) in diff --git a/Shorewall6/manpages/shorewall6-interfaces.xml b/Shorewall6/manpages/shorewall6-interfaces.xml index f66b0a0e8..196c9d3e6 100644 --- a/Shorewall6/manpages/shorewall6-interfaces.xml +++ b/Shorewall6/manpages/shorewall6-interfaces.xml @@ -394,15 +394,14 @@ loc eth2 - If this option is not specified for an interface, then source-routed packets will not be accepted from that interface - (sets - /proc/sys/net/ipv6/conf/interface/accept_source_route - to 1). Only set this option if you know what you are doing. - This might represent a security risk and is not usually + unless explicitly enabled via sysconf. Only set this option to + 1 (enable source routing) if you know what you are doing. This + might represent a security risk and is not usually needed. Only those interfaces with the option will have their setting - changes; the value assigned to the setting will be the value + changed; the value assigned to the setting will be the value specified (if any) or 1 if no value is given.