diff --git a/docs/ipsets.xml b/docs/ipsets.xml index 9482e447c..ef5c2326c 100644 --- a/docs/ipsets.xml +++ b/docs/ipsets.xml @@ -119,6 +119,12 @@ ACCEPT +sshok $FW tcp 22 /etc/shorewall/init (it works for me; your mileage may vary): + if [ "$COMMAND" = start ]; then + ipset -F + ipset -X + ipset -R < /etc/shorewall/ipsets +fi + The file /etc/shorewall/ipsets will normally be produced using the ipset -S command.