holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Update ipset doc with multiple match syntax

Browse Source
This commit is contained in:
Tom Eastep 2010-09-21 06:59:55 -07:00
parent dbd7914ee6
commit 26ec7cee1d
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/ipsets.xml
View File

@ -95,8 +95,8 @@
</listitem>
<listitem>
<para>They must be composed of letters, digits or underscores
("_").</para>
<para>They must be composed of letters, digits, dashes ("-") or
underscores ("_").</para>
</listitem>
</itemizedlist>
@ -128,6 +128,11 @@ ACCEPT net:+sshok $FW tcp 22</programlisting></para>
blacklist file, you can coerce the rule into matching the destination IP
address rather than the source.</para>
<para>Beginning with Shorewall 4.4.14, multiple source or destination
matches may be specified by placing multiple set names in '+[...]' (e.g.,
+[myset,myotherset]). When so inclosed, the set names need not be prefixed
with a plus sign.</para>
<para>Shorewall can save/restore your ipset contents with certain
restrictions:</para>