diff --git a/manpages/shorewall-accounting.xml b/manpages/shorewall-accounting.xml index 7d873116a..b9a9a7eed 100644 --- a/manpages/shorewall-accounting.xml +++ b/manpages/shorewall-accounting.xml @@ -102,8 +102,10 @@ Packet Source. - The name of an interface, an address (host or net) or an - interface name followed by ":" and a host or net address. + The name of an interface, an + address (host or net) or an + interface name followed by ":" and a host + or net address. @@ -148,20 +150,20 @@ role="bold">all|ipp2p-option|port-name-or-number[,port-name-or-number]...} - Destination Port number. If the PROTOCOL is ipp2p then this column must contain an - ipp2p-option ("iptables -m ipp2p --help") - without the leading "--". If no option is given in this column, - ipp2p is assumed. - - Service name from services(5) or port - number. May only be specified if the protocol is - tcp or Destination Port number. Service name from services(5) or + port number. May only be specified if the + protocol is tcp or udp (6 or 17). You may place a comma-separated list of port names or numbers in this column if your kernel and iptables include multiport match support. + + If the PROTOCOL is ipp2p then + this column must contain an ipp2p-option + ("iptables -m ipp2p --help") without the leading "--". If no option + is given in this column, ipp2p is + assumed. @@ -172,7 +174,7 @@ role="bold">all|port-name-or-number[,port-name-or-number]...} - Source Port Service name from services(5) or port + Service name from services(5) or port number. May only be specified if the protocol is TCP or UDP (6 or 17). @@ -274,4 +276,4 @@ shorewall-tcclasses(5), shorewall-tcdevices(5), shorewall-tcrules(5), shorewall-tos(5), shorewall-tunnels(5), shorewall-zones(5) - + \ No newline at end of file diff --git a/manpages/shorewall-exclusion.xml b/manpages/shorewall-exclusion.xml index 2c2f1e1fb..35136c62e 100644 --- a/manpages/shorewall-exclusion.xml +++ b/manpages/shorewall-exclusion.xml @@ -15,11 +15,8 @@ - ! - - address-or-range - - ,address-or-range + address-or-range[,address-or-range] diff --git a/manpages/shorewall.conf.xml b/manpages/shorewall.conf.xml index 8caba4e33..906929a13 100644 --- a/manpages/shorewall.conf.xml +++ b/manpages/shorewall.conf.xml @@ -851,9 +851,10 @@ role="bold">0|1] - Traditionally, Shorewall has created rules for the complete - matrix of Networks defined by the zones, interfaces and hosts files. - Any traffic that didn't correspond to an element of that matrix was + Traditionally, Shorewall has created rules for the complete matrix of host + groups defined by the zones, interfaces and hosts files. Any + traffic that didn't correspond to an element of that matrix was rejected in one of the built-in changes. When the matrix is sparse, this results in lots of largely useless rules. @@ -1167,7 +1168,7 @@ 1 — Major progress messages displayed - 2 — All progress messages displayed (old default + 2 — All progress messages displayed (pre Shorewall-3.2.0 behavior)