Add FAQ 52 -- Snort-Inline

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3301 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-01-16 17:07:11 +00:00
parent 005a53046f
commit a1afe649f5

View File

@ -17,7 +17,7 @@
</author> </author>
</authorgroup> </authorgroup>
<pubdate>2005-01-06</pubdate> <pubdate>2005-01-16</pubdate>
<copyright> <copyright>
<year>2001-2006</year> <year>2001-2006</year>
@ -1375,11 +1375,11 @@ Creating input Chains...
output to a file as in <command>shorewall restart &gt; output to a file as in <command>shorewall restart &gt;
/dev/null</command>).</para> /dev/null</command>).</para>
<para>Upgrade your hardware. Many people find that even a modest <para>Upgrade your hardware. Many people find that even a modest
increase in CPU and memory speed (e.g. from P3 with SDRAM to increase in CPU and memory speed (e.g. from P3 with SDRAM to P4 with
P4 with DDR) helps dramatically. EM64T-capable CPUs (from either DDR) helps dramatically. EM64T-capable CPUs (from either AMD or Intel)
AMD or Intel) exhibit quite acceptable restart speeds, even with a exhibit quite acceptable restart speeds, even with a fairly complex
fairly complex ruleset.</para> ruleset.</para>
<para>Shorewall also supports a fast start capability. To use this <para>Shorewall also supports a fast start capability. To use this
capability:</para> capability:</para>
@ -1908,8 +1908,9 @@ REJECT fw net:216.239.39.99 all</programlisting>Given that
<title>(FAQ 42) How can I tell which features my kernel and iptables <title>(FAQ 42) How can I tell which features my kernel and iptables
support?</title> support?</title>
<para>Answer: Use the <command>shorewall show capabilities</command> <para><emphasis role="bold">Answer</emphasis>: Use the
command at a root prompt.</para> <command>shorewall show capabilities</command> command at a root
prompt.</para>
<programlisting>gateway:~# shorewall show capabilities <programlisting>gateway:~# shorewall show capabilities
Loading /usr/share/shorewall/functions... Loading /usr/share/shorewall/functions...
@ -1936,5 +1937,13 @@ Shorewall has detected the following iptables/netfilter capabilities:
Raw Table: Available Raw Table: Available
gateway:~#</programlisting> gateway:~#</programlisting>
</section> </section>
<section id="faq52">
<title>(FAQ 52) How do I Configure Shorewall to work with
Snort-Inline?</title>
<para><emphasis role="bold">Answer</emphasis>: Please see <ulink
url="http://www.catherders.com/tikiwiki-1.9.1/tiki-read_article.php?articleId=47">http://www.catherders.com/tikiwiki-1.9.1/tiki-read_article.php?articleId=47</ulink></para>
</section>
</section> </section>
</article> </article>