diff --git a/docs/Documentation.xml b/docs/Documentation.xml index 3ef9f1d68..48b4629e3 100644 --- a/docs/Documentation.xml +++ b/docs/Documentation.xml @@ -3847,58 +3847,11 @@ all all tcp ftp-data - 8PORTS - Optional; may only be given if PROTOCOL is tcp, udp or icmp. + Optional; may only be given if PROTOCOL is tcp or udp. Expressed as a comma-separated list of destination port numbers or service names (from /etc/services). If present, only packets matching the specified protocol and one of the listed destination - ports are blocked. When the PROTOCOL is icmp, the PORTS column - contains a comma-separated list of ICMP type numbers or names (see - iptables -h icmp). - - - - - OPTIONS - - - (Optional) A comma-separated list of options. The - currently-supported options are: - - - - routeback - Set up a rule to ACCEPT traffic from these - hosts back to themselves. - - - - source - Allow traffic from these hosts to ANY - destination. Without this option or the 'dest option, only - traffic from this host to other listed hosts (and the firewall) - is allowed. If 'source' is specified then 'routeback' is - redundant. - - - - dest - Allow traffic to these hosts from ANY source. - Without this option or the 'source' option, only traffic from - this host to other listed hosts (and the firewall) is allowed. - If 'dest' is specified then 'routeback' is redundant. - - - - critical - Allow traffic between the firewall and these - hosts throughout '[re]start', 'stop' and 'clear'. Specifying - 'critical' on one or more entries will cause your firewall to be - "totally open" for a brief window during each of those - operations. - - - - - The 'source' and 'dest' options work best when used in - conjunction with ADMINISABSENTMINDED=Yes in - /etc/shorewall/shorewall.conf. - + ports are blocked.