diff --git a/Shorewall-docs/ping.xml b/Shorewall-docs/ping.xml index 7bbde29e5..cda70ebbc 100644 --- a/Shorewall-docs/ping.xml +++ b/Shorewall-docs/ping.xml @@ -34,12 +34,12 @@ - Shorewall 'Ping' management has evolved over time with the - latest change coming in Shorewall version 1.4.0. To find out which version - of Shorewall you are running, at a shell prompt type "/sbin/shorewall - version". If that command gives you an error, it's time to upgrade - since you have a very old version of Shorewall installed (1.2.4 or - earlier). + Shorewall Ping management has evolved over time with + the latest change coming in Shorewall version 1.4.0. To find out which + version of Shorewall you are running, at a shell prompt type + /sbin/shorewall version. If that command gives you an + error, it's time to upgrade since you have a very old version of + Shorewall installed (1.2.4 or earlier).
@@ -138,14 +138,14 @@ - If you would like to accept 'ping' by default even when the - relevant policy is DROP or REJECT, create /etc/shorewall/icmpdef if it + If you would like to accept ping by default even when + the relevant policy is DROP or REJECT, create /etc/shorewall/icmpdef if it doesn't already exist and in that file place the following command: run_iptables -A icmpdef -p icmp --icmp-type 8 -j ACCEPT - With that rule in place, if you want to ignore 'ping' from - z1 to z2 then you need a rule of the form: + With that rule in place, if you want to ignore ping + from z1 to z2 then you need a rule of the form: @@ -334,14 +334,14 @@ - If you would like to accept 'ping' by default even when the - relevant policy is DROP or REJECT, create /etc/shorewall/icmpdef if it + If you would like to accept ping by default even when + the relevant policy is DROP or REJECT, create /etc/shorewall/icmpdef if it doesn't already exist and in that file place the following command: run_iptables -A icmpdef -p icmp --icmp-type 8 -j ACCEPT - With that rule in place, if you want to ignore 'ping' from - z1 to z2 then you need a rule of the form: + With that rule in place, if you want to ignore ping + from z1 to z2 then you need a rule of the form: @@ -437,7 +437,7 @@ There is one exception to the above description. In 1.3.14 and 1.3.14a, ping from the firewall itself is enabled unconditionally. This - suprising "feature" was removed in version 1.4.0. + suprising feature was removed in version 1.4.0.
diff --git a/Shorewall-docs/ports.xml b/Shorewall-docs/ports.xml index 5fbc55776..99ae5e9cd 100644 --- a/Shorewall-docs/ports.xml +++ b/Shorewall-docs/ports.xml @@ -154,7 +154,7 @@ UDP ports 33434 through 33434+<max number of hops>-1 - ICMP type 8 ('ping') + ICMP type 8 (ping)
@@ -255,7 +255,7 @@
VNC - TCP port 5900 + <display number>. + TCP port 5900 + <display number>.