holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Add warning about side effects of ADD_SNAT_ALIASES and ADD_IP_ALIASES

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2749 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2005-09-29 15:37:15 +00:00
parent 36138df684
commit 3daf8076ff
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Shorewall/shorewall.conf
View File

@ -372,6 +372,10 @@ IP_FORWARDING=On
# for each NAT external address that you give in /etc/shorewall/nat. If you say # for each NAT external address that you give in /etc/shorewall/nat. If you say
# "No" or "no", you must add these aliases youself. # "No" or "no", you must add these aliases youself.
# #
# WARNING: Addresses added by ADD_IP_ALIASES=Yes are deleted and re-added during
# processing of the "shorewall restart" command. As a consequence, connections
# using those addresses may be severed.
#
ADD_IP_ALIASES=Yes ADD_IP_ALIASES=Yes
@ -383,6 +387,10 @@ ADD_IP_ALIASES=Yes
# say "No" or "no", you must add these aliases youself. LEAVE THIS SET TO "No" # say "No" or "no", you must add these aliases youself. LEAVE THIS SET TO "No"
# unless you are sure that you need it -- most people don't!!! # unless you are sure that you need it -- most people don't!!!
# #
# WARNING: Addresses added by ADD_SNAT_ALIASES=Yes are deleted and re-added during
# processing of the "shorewall restart" command. As a consequence, connections
# using those addresses may be severed.
#
ADD_SNAT_ALIASES=No ADD_SNAT_ALIASES=No
@ -811,9 +819,9 @@ MAPOLDACTIONS=No
# going from the 'loc' zone to the 'net' zone, ESTABLISHED/RELATED packets are # going from the 'loc' zone to the 'net' zone, ESTABLISHED/RELATED packets are
# ACCEPTED in the 'loc2net' chain. # ACCEPTED in the 'loc2net' chain.
# #
# If you set FASTACCEPT=Yes, then ESTABLISHED/RELEATED packets are accepted # If you set FASTACCEPT=Yes, then ESTABLISHED/RELEATED packets are accepted
# early in the INPUT, FORWARD and OUTPUT chains. If you set # early in the INPUT, FORWARD and OUTPUT chains. If you set
# FASTACCEPT=Yes then you may not specify ESTABLISHED policies in # FASTACCEPT=Yes then you may not specify ESTABLISHED policies in
# /etc/shorewall/policy. # /etc/shorewall/policy.
FASTACCEPT=No FASTACCEPT=No