diff --git a/Shorewall2/shorewall.conf b/Shorewall2/shorewall.conf index 3e5d9f08c..2530f0485 100755 --- a/Shorewall2/shorewall.conf +++ b/Shorewall2/shorewall.conf @@ -435,7 +435,7 @@ MUTEX_TIMEOUT=60 # established connection. # # If NEWNOTSYN is set to "No" or "no", then non-SYN packets that are not -# part of an already established connection, it will be dropped by the +# part of an already established connection will be dropped by the # firewall. The setting of LOGNEWNOTSYN above determines if these packets are # logged before they are dropped. # @@ -447,8 +447,8 @@ MUTEX_TIMEOUT=60 # also need to select NEWNOTSYN=Yes. # # The behavior of NEWNOTSYN=Yes may also be enabled on a per-interface basis -# using the 'newnotsyn' option in /etc/shorewall/interfaces and in -# /etc/shorewall/hosts. +# using the 'newnotsyn' option in /etc/shorewall/interfaces and on a +# network or host basis using the same option in /etc/shorewall/hosts. # # I find that NEWNOTSYN=No tends to result in lots of "stuck"