diff --git a/docs/ipsets.xml b/docs/ipsets.xml index b91be93bf..4d0027868 100644 --- a/docs/ipsets.xml +++ b/docs/ipsets.xml @@ -30,6 +30,8 @@ 2019 + 2020 + Thomas M. Eastep @@ -160,11 +162,11 @@ ACCEPT net:+sshok $FW tcp 22 - You cannot use an ipset in You can use an ipset in shorewall-stoppedrules - (5) (shorewall-routestopped - (5)). + (5), but SAVE_IPSET={Yes|ipv4} will not save such a set during 'stop' + processing. Use Shorewall-init to save/restore your ipsets in this + case (see below).