From 5aaa1492f5fe6e0f2dd3ba80a85962530cddf1ff Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Tue, 5 Dec 2006 17:43:03 +0000
Subject: [PATCH] Add FAQ 62

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5055 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 docs/FAQ.xml | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index e6b080c2f..a68c583b5 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -1648,8 +1648,8 @@ iptables: Invalid argument
       "shorewall start" fails with the message "ipt_policy: matchsize 116 !=
       308". What's wrong?</title>
 
-      <para>Answer: Your iptables is incompatible with your kernel.
-      Either</para>
+      <para><emphasis role="bold">Answer:</emphasis> Your iptables is
+      incompatible with your kernel. Either</para>
 
       <itemizedlist>
         <listitem>
@@ -1664,6 +1664,16 @@ iptables: Invalid argument
         </listitem>
       </itemizedlist>
     </section>
+
+    <section id="faq62">
+      <title>(FAQ 62) I have unexplained 30-second pauses during "shorewall
+      [re]start". What causes that?</title>
+
+      <para><emphasis role="bold">Answer:</emphasis> This usually happens when
+      the firewall uses LDAP Authentication. The solution is to list your LDAP
+      server(s) as <emphasis role="bold">critical</emphasis> in <ulink
+      url="Documentation.htm#Routestopped">/etc/shorewall/routestopped</ulink>.</para>
+    </section>
   </section>
 
   <section>