holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Document semantic change to 'all' handling in the conntrack file.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2012-11-22 09:10:07 -08:00
parent 059095e366
commit 8a744de906
2 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
Shorewall/manpages/shorewall-conntrack.xml
View File

@ -254,6 +254,16 @@
<para>Beginning with Shorewall 4.5.10, <option>all-</option> can be
used as the <replaceable>zone</replaceable> name to mean all
<firstterm>off-firewall zone</firstterm>s.</para>
<note>
<para>In 4.5.10, handling of <option>all</option> was changed.
<option>all</option> now causes the generated netfilter rule to be
appended to the raw table PREROUTING and OUTPUT chains directly.
<option>all-</option> rules are added directly to PREROUTING.
<option>all</option> and <option>all-</option> rules are processed
after the more specific rules that specify an individual
zone.</para>
</note>
</listitem>
</varlistentry>

10
Shorewall6/manpages/shorewall6-conntrack.xml
View File

@ -149,6 +149,16 @@
<para>Beginning with Shorewall 4.5.10, <option>all-</option> can be
used as the <replaceable>zone</replaceable> name to mean all
<firstterm>off-firewall zone</firstterm>s.</para>
<note>
<para>In 4.5.10, handling of <option>all</option> was changed.
<option>all</option> now causes the generated netfilter rule to be
appended to the raw table PREROUTING and OUTPUT chains directly.
<option>all-</option> rules are added directly to PREROUTING.
<option>all</option> and <option>all-</option> rules are processed
after the more specific rules that specify an individual
zone.</para>
</note>
</listitem>
</varlistentry>