From 56f788e9c198fd556e42c0a851825dc8f3fdfc56 Mon Sep 17 00:00:00 2001 From: teastep Date: Thu, 15 May 2003 19:40:35 +0000 Subject: [PATCH] Add some new files git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@549 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall-docs/ECN.html | 83 ++++++++++++++++++ Shorewall-docs/images/opera.png | Bin 0 -> 1670 bytes .../images/penquin_in_blue_racer_sm2.gif | Bin 0 -> 6507 bytes 3 files changed, 83 insertions(+) create mode 100644 Shorewall-docs/ECN.html create mode 100755 Shorewall-docs/images/opera.png create mode 100755 Shorewall-docs/images/penquin_in_blue_racer_sm2.gif diff --git a/Shorewall-docs/ECN.html b/Shorewall-docs/ECN.html new file mode 100644 index 000000000..c2ebd20ed --- /dev/null +++ b/Shorewall-docs/ECN.html @@ -0,0 +1,83 @@ + + + + Shorewall and ECN + + + + + + + + + + + +
+

ECN

+
+
+Explicit Congestion Notification (ECN) is described in RFC 3168 and is a +proposed internet standard. Unfortunately, not all sites support ECN and +when a TCP connection offering ECN is sent to sites that don't support it, +the result is often that the connection request is ignored.
+
+To allow ECN to be used, Shorewall allows you to enable ECN on your Linux +systems then disable it in your firewall when the destination matches a list +that you create (the /etc/shorewall/ecn file).
+
+You enable ECN by
+
+
+
echo 1 > /proc/sys/net/ipv4/tcp_ecn
+
+You must arrange for that command to be executed at system boot. Most distributions +have a method for doing that -- on RedHat, you make an entry in /etc/sysctl.conf.
+
+
+
net.ipv4.tcp_ecn = 1

+
+Entries in /etc/shorewall/ecn have two columns as follows:
+
+INTERFACE    - The name of an interface on your system
+
+HOST(S)        - An address (host or subnet) +of a system or group of systems accessed through the  interface in the +first column. You may include a comma-separated list of such addresses in +this column.
+
+Example: Your external interface is eth0 and you want to disable ECN for +tcp connections to 192.0.2.0/24:
+
+In /etc/shorewall/ecn:
+
+
+ + + + + + + + + + + +
INTERFACE
+
HOST(S)
+
eth0
+
192.0.2.0/24
+
+
+
+Last updated 3/28/2003 - Tom Eastep + +

Copyright © 2001, 2002, 2003 Thomas M. Eastep.
+

+ + diff --git a/Shorewall-docs/images/opera.png b/Shorewall-docs/images/opera.png new file mode 100755 index 0000000000000000000000000000000000000000..6a20025d0728c4acd615f3b6896831c461bbcc6a GIT binary patch literal 1670 zcmV;126_33P)IH04E3o0002W1*?y*GCBA6_uk&#?Vh9YzryBwf&BgW{PgkbjgHpV*7nZNwY9b2SX$jk zOufCm!NdXLvQlafKmcKc zm2v z6>&kW5ydAc#w)}s#0%o_OL1{=@q&sY9u5&M5D;VF2T>gG;NTDes{{xjEO`bP52Bcf z4<2g#kbo5gnj{X6HdZbkxK4g(fUt6K!;_RakOl}K)Tn{PHcEPiTLVpgJU|15K!qJJ zO>nX@vVsdHuqddg1zQ6aBbF==O@5Ga4&*+5h>JwP)^LMDPK-wo=3$U;#DP31s0+n~ zKsEvd5G-?Wv#_wU%R&m2VnME9;MVXUTLTO)aNJ0+f-Hnu!-dEb{E#Fi#KQ&3h5!Ks zGKY#BSF@1@$z!Qtbrs;pqGU>BtV`7 z2q2(G*oB#ZfR73hH!_lvKoJ3E7H(wUz~hD&MuDsm666&Fdy-WY=66A0Y;hpvIAEd# z2p|SFW{@RJ%*aVViX9@z#LR+`(m(;lDGJOnz@PwyoEQ%*N%3-UaEO7E07#8EB7Xq= z4-h~MFax=f@{I`4i%f8fQ1c2mFtM@*!h4tjg6g2fSsL>NtlI=1r&C`(gRqWFtD)m0sY6u&dtWo23F4i z5I{(A3QAQB5~yafGfB#!dIo4SP#rfjSUEc)#DxXefU4O+USs0}Cn-KAW??3X5_W(9 zM3%t{05AwbA%oo{*#H0QUSqU#poxiH<=>xtZ`t&k-vx{_3fVYXR_uceh6fxUq@3d5hQ~20yx4?U0}LKvprOFfW`V{EGsxe}EFcepQXVkS zgdw&9vpF-+7t8MeX0Uge z!Bzo9*;$y`0Rjj$adQJh6?ATSQ6b^lX{yzqTVb;{? zhMxv{R^trQxj(-T&YBhz<+NkGy~5pr^e|DAeyd%_`iwTq`10A{;yBmFJ_NJL#ci{# zoK>!qQcUa@jv6;LG-0>N$b>UmR*DaK`|iD&^VEp}agbXf|DpKzE^!u-#`KDA)*{2${_zz$gdFcSqphBhdi=*0qb~*3Z8#4 z&%cO2S;P0q6(~vtM4>RC44$-19I{>Q;tz#60Q4N_t`Y$7uc zE3gh-;W(?nJ+8==T*FQ`h4|=WkxP_NeRbz{Sqnyos4Sw*|bhaXe>I;%nK%?!lUA|mgRT^PE|~s9hs0cZFbbpK||P_ z*jaPu%}q&9UYP0N=rqpN?ax(t&tASNDz6};qSq7_#U>`M-?XWmqJl$1kDffadHeRM z5fM#i&t7BM@4tTC@9q8e{riWHA9o+vzq7HSt+OL$Zd~`B+lQDV6Fog1b5B11_`ZYK>_}lrm--Nv12tZ^0Ps0D1 zfDi*DK&(R@4C!L~ja?ZN|v%+Zp zT<^6m`Fl*>?n?CZf~{-uPpnXk#f&{@HSS%57A%VTF;d2-wkiv+&kiK?uOkNLI?k? zp?(H@@c#0$&|#Er?t4e+-shehj@-2iGubm|ME|Cb4Mk`|a8S(g@|hz$?}t){y_{$4#QmAJW#)Dc10^HVQ~_5IcyP~p^G*u}mZi3(huM^q zjk+qY7ded%>wIrLwU2w{l(H@%bVNBauu)sR9>h;2HM?~-X=4^%wpw}~YTcz4ecvaESzX^D zS$jpPp({tZ2r$=I`9U_RZAp?*s&RG!tA)DRGyHCL$G)6OB-l%2Q7^nNTl+Obmk%+Q z4c}d`bwqLiCSMKljb!I#{~SGf5$dqXdv-?RsJeXSfZ{_Ejpi5bJw8H%Lb5lkL(Jg568*=HGJJU1Sq|*`oO9tIHV$ z$OenFAc*p{3&354*dmZ~@|Z*2=JP)9heh91o2uP>5-|{J$IEfm z*uC6{1sdhdxz;sO89gQ~r1RP*vU^9!kNA-`n{~z3ZZ+7VzT=nKAUnD8eVhIBWJ7<; zt`jY?z`pe@!-~O5m8R>ya+mEeyLXE@6RB?O-4T*-bWlj}N?N#yEVQ-m&z~BqF+HqRIHph%VW!f! zoR%<=E_jUvUZRDx@S*nQW)5TP&gl2mgv44aD%#an@ zhAJeSDtjdSUhFXkDm4ZJr~?snLw>A0cv;f0-P#5VU3Syoo1R)&ITblLz6Qh{oyoTJ zb~li%^Oor(bWFR=7I~qim#uLPS;UU|SR3Y*giP!SvM;@b#MWqrzuB^TTzFDtA|7b{ zyxH2TcP2L9;^UUf>Y|a}GkG(g*@5s^3cLm?kLcu^u1yaxdP@{K;daJm$8m>INnlAC zAv9EXLVOyr$NGiaUbR48Oa;mEw|-qM@?2eSsEE%LWW7r-cHOzbNHh5_iJ?8S$ zuC)ke5&=fFoH*K{!ZcLg0#YH3oTXRz^ym=h{e{jE^>{^R3mBmUfi(+7K}0)r+;yF1 z#GGNm_SX}3_g5scc5qW@h}>HwP2FNYJan4NtYBkwCaWFwiV#~z|h7X^_Z0R zVizb$RS-VMqD?K33H!y~ojj{_R_r)787M4TB}hND+&Az*&a@7%%nh2jJIQ7(WN>$z z>$+@tfn}f9o1`=O6-n9#^RCW-A*5D(c%9v$H(a38g!J_bvH$&-y{Cp|ZfL`TE#oqaPKqZ<4Lp{lVknwv1Of1X`9)JCa;9vto9T zy;(jdfX1zgonJX$0KHNV*#;F_es#v=c!9+|Ml?yT03o<$L^4;h&`ASAw(u<5I3&|6 z(Bewu5qYL7mWDmGxPgRtc#->dXBJqT)fZ`sbe!njee)`(Hd|jv{W{SMvU0lY1j*5W zIXYx<4llj^kjU+hP7+BR-IA&ok5kr56trUaHf4EMTZ^uRWY*=`Vu?hfWveX2qoy0v znZ?-jDnrICtFKVL;+vDj$H!+Jt2jL(+3c#9UKFxn{X*iY6~qZ-2la(Eg-M4OS-i8V zQ^PKDodF?UDJ*FQamMqd^V0+EF47?0*YZk>a!K`$K6GA+{jd(N5D!&9W^eS&N!PD+ ztLd&#{%kNWVOmT%r=q}~&EpBoW8+?_=M=hGi3vXu z3BXsgf(aN8gniXvZE~@T*6Tt5t}$N6qP);X^YFLrZVla)3!p6)-9+)pIf}}}o))v4 zdacby>P?El7I(=R=@i6UyjtHn;yOgQ*Jf8lmkxl)^cLx5naHEYR`Ru$Z&C;ez0a=$ zIjlf>3o00XjZ=AQ6=1ot#OKa{<&&mhd1iOzIv>IC?w;TcsKff)I{T5Fp%We-l~@s_ zCyc=9eCsvDD8H{-BbUr!ip-IReF#@YKMA2y9{_6y%YfPla zTBvo=QR3F7c(TAJXTWmwyp`k5_JNF2d#m2k;0Y%aa4u-%e0#l^JnUMr%Y!z}VR>{s zRXoBXUlNhS7vb{tEgetw@3)BkA$@tgvL8fSv>A2Mqr6g2aKp8@<0W9GcA3f#PQSSu^ahxwJp%BSmW zW6NExxlxM?lg$o)72Zpdl|1pU2Xka_7%M)611Y`wi`od$LZ4}AJA=NFq1*K0D3$Qi z=EQTUf{Cg>=iJX9{?${?@yC;sYFP<65q0uHTRvgW_kjmQMw=W2M)D7;!82&6o;C|o zxS#6y|If}lihX6md`GxBRk&S-uGUIj2nZ%2RBJTANV}BSH$AAAp_@rT$}HbpQZSKo zkuyHa$l_ElacaB3hZJQIfpru#T#jb<@J>=_69k^W1kXLON06!iM^pV5;|$%<1FZSd zmw=`PN0SA)xG==P3RNkYzG}&FJ?J2eKC2-M0{V|IdPdB>-7Y@PiYIddU%A`*rhK%JUr_Heo>XO|apbJNPMOOAoXl6Y)rZ7LiOb=5? zJY|Bh@~W}4U^25vL1pG@MaSjfEzQ&F;r)csKLmbI1|Uk}$(6#MZfiffthq0gN0sl1 z@m)xZ7O>;9I0>M5mP($XhgV6Vy%4y~fIBj*gOole%z~;-?HT@PZpcBBAM_MX)fQ*# zCA%2OE|qu{DPDPByiLV>!b#6@*i}9HuS}{5mfn@|izrDRQ5eDrG=^#s_sQkrl#M&} z)&5haY2H7wB3 zwTynHlg#y3vgpSv$VATDeS;dLHG0%A4%;~K zVJ$eqL~f-e%awwZTi~-0XqDg$4i2%BwQ}JST(F!HMv`yoiR7J?Va+m3r$)P3*ji6{Z2+Um>GQnZ#r?4RN%2l5 z^5<4b7Awf5Gu1LsLIAS{{^Hl-JVvmP5`{u5XUN5;0~g(N7G$YJ*^DHg1xMKW;h-*$ z5!=Oyv$UdZ3^;-Fj8#0BVLWFR#fnj#92>27@XiMV^2%cjdX8y)MWvS&OCKnKUJoy& z#1mV09j7GQ$=~i1hH8Z`<_i@#-&M;W!}0C5hzJ#2rWN`Uf@i^t+!#S7<+xeB;{*;e zd-v9}yx|-eu9vJN1cym1=WliMZt347iq)dWWYU|)Lk6_q4U-hOB6e<6l7%6vq(u(q zLBbU(-(M?5IqcdaUnhq`LM63Qj*F%$kun+lXyV?5B9SK{qP3u2h3>(_HVO|_2cb<` zq>|=eWsGV+qpxYKXb<*+#x63;san%JdeB}t#RWSf$GTK-5Ie0z4y#%4hgz&q zCAOrkB&d}~O+>jWxLgMNQK`?K*U9z#RF%l77rIg&@q{vJ=Fr#P(%aG(NN6R`tHP5R8&@I@#Pg<+!W_Bay0_@TM)6t(X{AtNRnrSCXrcIjO+uSE z^bsl3D?uwAUG(SaoVhUR~$~DQkHK&opY$^JjL(8!9^u@UOxkN1Fxx=Z+qe!(>8ZexhGWE9XUQv4U;ms zEF9i`HlO*x_md0fC^KiUsd_QaFsPyk)0dg`)hfL&&o?_izgdeGdsMbj=|X4Rjzx~eEKB(u8HI{` zI6;U~=oEtNCSi9%G)@k?(ENBv+DU`FC>^?YzSIo+jd5uR_WE>VftB@z*M}oS3$AF9 zvoxl;mvUB~Wn+%sV6pQo*3W`?7MYIcIgb+dnU5Z)6-L7ptI4+LRV9Jm8w{0fAk&x9*XHD-^0TC>QGVm`00UVmiY;8hcsHCG6sL z0=vqfuPC^XK9{vzNH~oirxN^=jw~4>Da6GS^n#fTymRaCO{|&jJj0@FEjmJrt~%ej zwhr6WhjrlSZ5(YKX?+j}k3VN!;CLDqfc9%=S+tb{`RB2FX6RK8Bv8m~Ja3L%IEnC# zb4+&C3ko=7=`*+#=Q|R@-849;#yWAS10?NMqt`Og<~O`;GUOW8sHg+OOMXW>IHpEV zSy^|gu%r%@VI?%PCCT%|(|@4Ee?jJ7cmp!R7eT= z8y4_TCPfV1RvZnQm?hp-*?+O3_2-vdpnqE>V_ZxYi=(R1*2}DN>rr&dgJ`3FQ#vTj z?<`t&xiQ005~)VYRIoxV;9LZ`GI(+_6064I8MLrZ8hyQSaUN#b7oG81dI|z#^_{2m z4QJHoLp65d80eM*zuY#zMx!{(A@?}c|I_TAgOXie0AQh0OvhDy_P_eZ%~jGiEnK7W zjFrLrkkPKVpn!t+a)=8A>^P(ZM_=iC|HU63-|^rn{$Rtu(!&tgr4;S_vT}kChIoSk znY34?JxBELNU607$9N@@X1 z1I-1jQ)TL&Q($aua*sxxLeXqmvOp$|Dc^JZ72lOe`?llB0}A8gpqfU)IHX(!Z$J1u zlLQqs*sDe=-yahvSfF%v_Cgz?ue0jq<8tnF zt8LzCc@w+)WJy3rViJn~hgLM76u8NIU7@ICLX;;*q6j3KK=Mu^i43B^&xC3(&1Pn8 zWRSu7%F%kHj6%wlugVRoSCPcj<*ewYWn6)2+#~O9#~vO-amr_!$1K+hfxE1c`v%Zn zZrYs;Dsi4fhMZoSdU)KTzt#vceisZ%yhs_R|IaG%py#rwjPOKqqT`n%1xr7i660#gVDo>LByY_NFrkWijAQ#`8$2q^ zw2-ue;!Uk~%C{4zjuZw`nF|K^?v$`h3wsQM4pQ)L2A-$JHq!hYh=1kWi*d5JaZsX0 zkhpSJx$S;YCOZnyHB-HL5zff8rr#<^?=hf5iSDCpTe2tStAty2ecN_vVY5g*gB4EE zi(@&snuX^bkS)GB)J`sGo-5pD_-5!!2BMmbs4l_>ks#=IIyIumt7us zVAdb~P1j$dsZ7Ga;_pKqMmx?c@7(D3EmQ@1Pcis-`i*ig5=tEzW5E<{+JD${mGKE)n3 zPnX`Vd;Q{(^$L$g9eZXEsruOa>7Tnts(q%s&3*s6->~ys)U