holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Clarify ipsets WRT xtables-addons.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2013-03-08 08:18:00 -08:00
parent 50030bcc2d
commit a990ceecba
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
docs/ipsets.xml
View File

@ -48,10 +48,10 @@
<section id="Ipsets"> <section id="Ipsets">
<title>What are Ipsets?</title> <title>What are Ipsets?</title>
<para>Ipsets are an extension to Netfilter/iptables that are currently <para>Ipsets are an extension to Netfilter/iptables that are available in
available in <ulink <ulink url="http://xtables-addons.sourceforge.net/">xtables-addons</ulink>
url="http://xtables-addons.sourceforge.net/">xtables-addons</ulink>. if they are not available in your current distribution. Instructions for
Instructions for installing xtables-addons may be found in the <ulink installing xtables-addons may be found in the <ulink
url="Dynamic.html">Dynamic Zones article</ulink>.</para> url="Dynamic.html">Dynamic Zones article</ulink>.</para>
<para>Ipset allows you to create one or more named sets of addresses then <para>Ipset allows you to create one or more named sets of addresses then
@ -172,6 +172,6 @@ ACCEPT net:+sshok $FW tcp 22</programlisting></para>
contents of the ipsets will be save to and restored from. Shorewall-init contents of the ipsets will be save to and restored from. Shorewall-init
will create any necessary directories during the first 'save' operation. will create any necessary directories during the first 'save' operation.
If you configure Shorewall-init to save/restore ipsets, be sure to set If you configure Shorewall-init to save/restore ipsets, be sure to set
SAVE_IPSETS=No in shorewall.conf and shorewall6.conf. </para> SAVE_IPSETS=No in shorewall.conf and shorewall6.conf.</para>
</section> </section>
</article> </article>