diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index c38be9cb9..1efd7de06 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -1653,6 +1653,14 @@ Creating input Chains...
url="Shorewall-perl.html">Shorewall-perl.
+
+ (FAQ 69) When I restart Shorewall, new connections are blocked
+ for a long time. Is there a way to avoid that?
+
+ Answer: Switch to using Shorewall-perl.
+
+
(FAQ 43) I just installed the Shorewall RPM and Shorewall doesn't
start at boot time.
@@ -1756,7 +1764,7 @@ iptables: Invalid argument
the following message:
ERROR: Command "/sbin/iptables -A FORWARD -m state --state
- ESTABLISHED,RELATED -j ACCEPT"
+ ESTABLISHED,RELATED -j ACCEPT" failed.
Answer: At a root shell prompt,
type the iptables command shown in the error message. If the command
diff --git a/docs/Shorewall-perl.xml b/docs/Shorewall-perl.xml
index fc63db026..cb1d0b520 100644
--- a/docs/Shorewall-perl.xml
+++ b/docs/Shorewall-perl.xml
@@ -127,9 +127,9 @@
The BROADCAST column in the interfaces file is essentially
- unused; if you enter anything in this column but '-' or 'detect',
- you will receive a warning. This will be relaxed if and when the
- addrtype match requirement is relaxed.
+ unused if your kernel/iptables has Address Type Match support. If
+ that support is present and you enter anything in this column but
+ '-' or 'detect', you will receive a warning.
@@ -158,7 +158,7 @@
into the compiled script and executed at run-time. In many cases,
this approach doesn't work with Shorewall Perl because (almost) the
entire ruleset is built by the compiler. As a result, Shorewall-perl
- runs many extension scripts at compile-time rather than at run-time.
+ runs some extension scripts at compile-time rather than at run-time.
Because the compiler is written in Perl, your extension scripts from
earlier versions will no longer work.
@@ -167,8 +167,8 @@
- Compile-time
+ Compile-time (Must be written
+ in Perl)
Run-time
@@ -282,7 +282,7 @@
The log_rule_limit function works like it does in the shell
- compiler with two exceptions:
+ compiler with three exceptions: