From 5fd7c573fcf24e2898d64c62c93d80c4beaf3533 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Tue, 7 Oct 2014 11:41:57 -0700 Subject: [PATCH] Clarify Shorewall-init SAVE_IPSETS setting Signed-off-by: Tom Eastep --- docs/ipsets.xml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/docs/ipsets.xml b/docs/ipsets.xml index af3b1058c..3dc14bb0e 100644 --- a/docs/ipsets.xml +++ b/docs/ipsets.xml @@ -192,6 +192,10 @@ ACCEPT net:+sshok $FW tcp 22 the ipsets will be save to and restored from. Shorewall-init will create any necessary directories during the first 'save' operation. If you configure Shorewall-init to save/restore ipsets, be sure to set - SAVE_IPSETS=No in shorewall.conf and shorewall6.conf. + SAVE_IPSETS=No in shorewall.conf and shorewall6.conf. If you configure + SAVE_IPSETS in both shorewall.conf(5) and shorewall6.conf(5) then do + not set SAVE_IPSETS in shorewall-init.