diff --git a/Shorewall/interfaces b/Shorewall/interfaces index 8ac277fa7..595d49581 100644 --- a/Shorewall/interfaces +++ b/Shorewall/interfaces @@ -20,6 +20,8 @@ # an alias (e.g., eth0:0) here; see # http://www.shorewall.net/FAQ.htm#faq18 # +# DO NOT DEFINE THE LOOPBACK INTERFACE (lo) IN THIS FILE. +# # BROADCAST The broadcast address for the subnetwork to which the # interface belongs. For P-T-P interfaces, this # column is left black.If the interface has multiple diff --git a/Shorewall/policy b/Shorewall/policy index 4b144d54e..6c6ba0fbe 100644 --- a/Shorewall/policy +++ b/Shorewall/policy @@ -17,6 +17,10 @@ # DEST Destination zone. Must be the name of a zone defined # in /etc/shorewall/zones, $FW or "all" # +# WARNING: Firewall->Firewall policies are not allowed; if +# you have a policy where both SOURCE and DEST are $FW, +# Shorewall will not start! +# # POLICY Policy if no match from the rules file is found. Must # be "ACCEPT", "DROP", "REJECT" or "CONTINUE" #