forked from extern/shorewall_code
Fix a couple of errors in the manpages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9114 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
12e6a41e4a
commit
610875866c
@ -71,8 +71,8 @@
|
||||
current mark value to produce a new mark value.</para>
|
||||
|
||||
<para>Both "|" and "&" require Extended MARK Target support
|
||||
in your kernel and ip6tables; neither may be used with connection
|
||||
marks (see below).</para>
|
||||
in your kernel and ip6tables; neither may be used with
|
||||
connection marks (see below).</para>
|
||||
|
||||
<para>May optionally be followed by <emphasis
|
||||
role="bold">:P</emphasis>, <emphasis role="bold">:F</emphasis>
|
||||
@ -554,7 +554,7 @@
|
||||
<para>Example: Mark all FTP data connections with mark
|
||||
4:<programlisting>#MARK/ SOURCE DEST PROTO PORT(S) SOURCE USER TEST LENGTH TOS CONNBYTES HELPER
|
||||
#CLASSIFY PORT(S)
|
||||
4 ::/ ::/ TCP - - - - - - - ftp</programlisting></para>
|
||||
4 ::/0 ::/0 TCP - - - - - - - ftp</programlisting></para>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
</variablelist>
|
||||
@ -580,12 +580,12 @@
|
||||
|
||||
<programlisting> #MARK/ SOURCE DEST PROTO PORT(S) SOURCE USER TEST
|
||||
#CLASSIFY PORT(S)
|
||||
1 ::/ ::/ icmp echo-request
|
||||
1 ::/ ::/ icmp echo-reply
|
||||
RESTORE ::/ ::/ all - - - 0
|
||||
CONTINUE ::/ ::/ all - - - !0
|
||||
4 ::/ ::/ ipp2p:all
|
||||
SAVE ::/ ::/ all - - - !0</programlisting>
|
||||
1 ::/0 ::/0 icmp echo-request
|
||||
1 ::/0 ::/0 icmp echo-reply
|
||||
RESTORE ::/0 ::/0 all - - - 0
|
||||
CONTINUE ::/0 ::/0 all - - - !0
|
||||
4 ::/0 ::/0 ipp2p:all
|
||||
SAVE ::/0 ::/0 all - - - !0</programlisting>
|
||||
|
||||
<para>If a packet hasn't been classifed (packet mark is 0), copy the
|
||||
connection mark to the packet mark. If the packet mark is set, we're
|
||||
|
@ -125,7 +125,7 @@
|
||||
<listitem>
|
||||
<para>The IP address of the remote tunnel gateway. If the remote
|
||||
gateway has no fixed address (Road Warrior) then specify the gateway
|
||||
as <emphasis role="bold">0.0.0.0/0</emphasis>. May be specified as a
|
||||
as <emphasis role="bold">::/0</emphasis>. May be specified as a
|
||||
network address and if your kernel and ip6tables include iprange
|
||||
match support then IP address ranges are also allowed.</para>
|
||||
</listitem>
|
||||
@ -173,7 +173,7 @@
|
||||
"gw" zone is used to represent the remote LapTop</para>
|
||||
|
||||
<programlisting> #TYPE ZONE GATEWAY GATEWAY ZONES
|
||||
ipsec net ::/ gw</programlisting>
|
||||
ipsec net ::/0 gw</programlisting>
|
||||
</listitem>
|
||||
</varlistentry>
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user