From a61e208be18b94764fe4b6705114674304e71832 Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Thu, 30 Sep 2004 15:30:35 +0000
Subject: [PATCH] Documentation updates

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1655 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall-docs2/OPENVPN.xml         |  6 +++---
 Shorewall-docs2/traffic_shaping.xml | 11 ++++++++++-
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/Shorewall-docs2/OPENVPN.xml b/Shorewall-docs2/OPENVPN.xml
index 589afc31e..826e210c8 100644
--- a/Shorewall-docs2/OPENVPN.xml
+++ b/Shorewall-docs2/OPENVPN.xml
@@ -21,7 +21,7 @@
       </author>
     </authorgroup>
 
-    <pubdate>2004-09-14</pubdate>
+    <pubdate>2004-09-29</pubdate>
 
     <copyright>
       <year>2003</year>
@@ -118,10 +118,10 @@ generic:udp:5000       net            134.28.54.2</programlisting>
     OpenVPN to 7777, you can define /etc/shorewall/tunnels like this:</para>
 
     <blockquote>
-      <para> /etc/shorewall/tunnels with port 7777:</para>
+      <para>/etc/shorewall/tunnels with port 7777:</para>
 
       <programlisting>#TYPE             ZONE           GATEWAY         GATEWAY ZONE
-openvpn:77777     net            134.28.54.2</programlisting>
+openvpn:7777      net            134.28.54.2</programlisting>
     </blockquote>
 
     <para>This is the OpenVPN config on system A:</para>
diff --git a/Shorewall-docs2/traffic_shaping.xml b/Shorewall-docs2/traffic_shaping.xml
index 8a855b997..320a4e6c8 100644
--- a/Shorewall-docs2/traffic_shaping.xml
+++ b/Shorewall-docs2/traffic_shaping.xml
@@ -15,7 +15,7 @@
       </author>
     </authorgroup>
 
-    <pubdate>2004-08-05</pubdate>
+    <pubdate>2004-09-30</pubdate>
 
     <copyright>
       <year>2001-2004</year>
@@ -182,6 +182,15 @@
     to occur in the FORWARD chain by using the MARK_IN_FORWARD_CHAIN option in
     shorewall.conf.</para>
 
+    <important>
+      <para>Unlike entries in <filename><ulink
+      url="Documentation.htm#Rules">/etc/shorewall/rules</ulink></filename>,
+      evaluation of entries in <filename>/etc/shorewall/tcrules</filename>
+      continues after a match. So the final mark assigned to each packet is
+      determined by the <emphasis role="bold">last</emphasis> matching entry
+      in the <filename>/etc/shorewall/tcrules</filename> file.</para>
+    </important>
+
     <para>Columns in the file are as follows:</para>
 
     <itemizedlist>