From b079a1cefd3e0b2ec20ecb96861d4ebdb8ac8671 Mon Sep 17 00:00:00 2001
From: mhnoyes <mhnoyes@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Sat, 13 Dec 2003 21:35:09 +0000
Subject: [PATCH] DocBook XML conversion

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@844 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall-docs/ECN.xml | 81 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 81 insertions(+)
 create mode 100644 Shorewall-docs/ECN.xml

diff --git a/Shorewall-docs/ECN.xml b/Shorewall-docs/ECN.xml
new file mode 100644
index 000000000..870ac5f55
--- /dev/null
+++ b/Shorewall-docs/ECN.xml
@@ -0,0 +1,81 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
+"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
+<article id="ECN">
+  <articleinfo>
+    <title>ECN</title>
+
+    <authorgroup>
+      <author>
+        <firstname>Tom</firstname>
+
+        <surname>Eastep</surname>
+      </author>
+    </authorgroup>
+
+    <copyright>
+      <year>2001</year>
+
+      <year>2002</year>
+
+      <year>2003</year>
+
+      <holder>Thomas M. Eastep</holder>
+    </copyright>
+
+    <pubdate>2003-03-28</pubdate>
+  </articleinfo>
+
+  <section>
+    <title>Explicit Congestion Notification (ECN)</title>
+
+    <para>Explicit Congestion Notification (ECN) is described in RFC 3168 and
+    is a proposed internet standard. Unfortunately, not all sites support ECN
+    and when a TCP connection offering ECN is sent to sites that don&#39;t
+    support it, the result is often that the connection request is ignored.</para>
+
+    <para>To allow ECN to be used, Shorewall allows you to enable ECN on your
+    Linux systems then disable it in your firewall when the destination
+    matches a list that you create (the /etc/shorewall/ecn file).</para>
+
+    <para>You enable ECN by</para>
+
+    <programlisting>echo 1 &#62; /proc/sys/net/ipv4/tcp_ecn</programlisting>
+
+    <para>You must arrange for that command to be executed at system boot.
+    Most distributions have a method for doing that -- on RedHat, you make an
+    entry in /etc/sysctl.conf.</para>
+
+    <programlisting>net.ipv4.tcp_ecn = 1</programlisting>
+
+    <para>Entries in /etc/shorewall/ecn have two columns as follows:</para>
+
+    <variablelist>
+      <varlistentry>
+        <term>INTERFACE</term>
+
+        <listitem>
+          <para>The name of an interface on your system</para>
+        </listitem>
+      </varlistentry>
+
+      <varlistentry>
+        <term>HOST(S)</term>
+
+        <listitem>
+          <para>An address (host or subnet) of a system or group of systems
+          accessed through the interface in the first column. You may include
+          a comma-separated list of such addresses in this column.</para>
+        </listitem>
+      </varlistentry>
+    </variablelist>
+
+    <example>
+      <title>Your external interface is eth0 and you want to disable ECN for
+      tcp connections to 192.0.2.0/24:</title>
+
+      <para><table><title>/etc/shorewall/ecn</title><tgroup cols="2"><thead><row><entry
+      align="center">INTERFACE</entry><entry align="center">HOST(S)</entry></row></thead><tbody><row><entry>eth0</entry><entry>192.0.2.0/24</entry></row></tbody></tgroup></table></para>
+    </example>
+  </section>
+</article>
\ No newline at end of file