From a1a6352617c3b957418cb3f2feedd3b924b14599 Mon Sep 17 00:00:00 2001
From: Tuomo Soini <tis@foobar.fi>
Date: Mon, 15 Feb 2016 18:20:39 +0200
Subject: [PATCH] macro.SANE: update macro header and description

Signed-off-by: Tuomo Soini <tis@foobar.fi>
---
 Shorewall/Macros/macro.SANE | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/Shorewall/Macros/macro.SANE b/Shorewall/Macros/macro.SANE
index ee396c432..34ffae3ae 100644
--- a/Shorewall/Macros/macro.SANE
+++ b/Shorewall/Macros/macro.SANE
@@ -1,13 +1,10 @@
 #
-# Shorewall - SANE Macro
+# Shorewall -- /usr/share/shorewall/macro.SANE
 #
-# /usr/share/shorewall/macro.SANE
-#
-#	This macro handles SANE network scanning.
+# This macro handles SANE network scanning.
 #
 ###############################################################################
-#ACTION	SOURCE	DEST	PROTO	DEST	SOURCE	ORIGIN	RATE	USER/
-#				PORT(S)	PORT(S)	DEST	LIMIT	GROUP
+#ACTION	SOURCE	DEST	PROTO	DPORT	SPORT	ORIGDEST	RATE	USER
 
 ?if ( __CT_TARGET && ! $AUTOHELPERS && __SANE_HELPER )
  PARAM	-	-	tcp	6566 { helper=sane }
@@ -17,7 +14,8 @@
 
 #
 # Kernels 2.6.23+ has nf_conntrack_sane module which will handle
-# sane data connection.
+# sane data connection. If you need these, copy this file to /etc/shorewall
+# and remove comments from one of the entries below.
 #
 # If you don't have sane conntracking support you need to open whole dynamic
 # port range.