forked from extern/shorewall_code
Fix indentation in manpage
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9437 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
1fbfdd77fc
commit
bfc3b2d82b
@ -435,59 +435,56 @@
|
|||||||
separated by a slash (e.g. FTP/ACCEPT) is still allowed but is
|
separated by a slash (e.g. FTP/ACCEPT) is still allowed but is
|
||||||
deprecated.</para>
|
deprecated.</para>
|
||||||
|
|
||||||
<programlisting></programlisting>
|
<para>The <emphasis role="bold">ACTION</emphasis> may
|
||||||
|
optionally be followed by ":" and a syslog log level (e.g,
|
||||||
|
REJECT:info or DNAT:debug). This causes the packet to be
|
||||||
|
logged at the specified level. Note that if the <emphasis
|
||||||
|
role="bold">ACTION</emphasis> involves destination network
|
||||||
|
address translation (DNAT, REDIRECT, SAME, etc.) then the
|
||||||
|
packet is logged <emphasis role="bold">before</emphasis> the
|
||||||
|
destination address is rewritten.</para>
|
||||||
|
|
||||||
|
<para>If the <emphasis role="bold">ACTION</emphasis> names an
|
||||||
|
<emphasis>action</emphasis> declared in <ulink
|
||||||
|
url="shorewall-actions.html">shorewall-actions</ulink>(5) or
|
||||||
|
in /usr/share/shorewall/actions.std then:</para>
|
||||||
|
|
||||||
|
<itemizedlist>
|
||||||
|
<listitem>
|
||||||
|
<para>If the log level is followed by "!' then all rules
|
||||||
|
in the action are logged at the log level.</para>
|
||||||
|
</listitem>
|
||||||
|
|
||||||
|
<listitem>
|
||||||
|
<para>If the log level is not followed by "!" then only
|
||||||
|
those rules in the action that do not specify logging are
|
||||||
|
logged at the specified level.</para>
|
||||||
|
</listitem>
|
||||||
|
|
||||||
|
<listitem>
|
||||||
|
<para>The special log level <emphasis
|
||||||
|
role="bold">none!</emphasis> suppresses logging by the
|
||||||
|
action.</para>
|
||||||
|
</listitem>
|
||||||
|
</itemizedlist>
|
||||||
|
|
||||||
|
<para>You may also specify <emphasis
|
||||||
|
role="bold">ULOG</emphasis> or <emphasis
|
||||||
|
role="bold">NFLOG</emphasis> (must be in upper case) as a log
|
||||||
|
level.This will log to the ULOG or NFLOG target for routing to
|
||||||
|
a separate log through use of ulogd (<ulink
|
||||||
|
url="http://www.netfilter.org/projects/ulogd/index.html">http://www.netfilter.org/projects/ulogd/index.html</ulink>).</para>
|
||||||
|
|
||||||
|
<para>Actions specifying logging may be followed by a log tag
|
||||||
|
(a string of alphanumeric characters) which is appended to the
|
||||||
|
string generated by the LOGPREFIX (in <ulink
|
||||||
|
url="shorewall.conf.html">shorewall.conf</ulink>(5)).</para>
|
||||||
|
|
||||||
|
<para>Example: ACCEPT:info:ftp would include 'ftp ' at the end
|
||||||
|
of the log prefix generated by the LOGPREFIX setting.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
</variablelist>
|
</variablelist>
|
||||||
|
|
||||||
<blockquote>
|
|
||||||
<para>The <emphasis role="bold">ACTION</emphasis> may optionally
|
|
||||||
be followed by ":" and a syslog log level (e.g, REJECT:info or
|
|
||||||
DNAT:debug). This causes the packet to be logged at the specified
|
|
||||||
level. Note that if the <emphasis role="bold">ACTION</emphasis>
|
|
||||||
involves destination network address translation (DNAT, REDIRECT,
|
|
||||||
SAME, etc.) then the packet is logged <emphasis
|
|
||||||
role="bold">before</emphasis> the destination address is
|
|
||||||
rewritten.</para>
|
|
||||||
|
|
||||||
<para>If the <emphasis role="bold">ACTION</emphasis> names an
|
|
||||||
<emphasis>action</emphasis> declared in <ulink
|
|
||||||
url="shorewall-actions.html">shorewall-actions</ulink>(5) or in
|
|
||||||
/usr/share/shorewall/actions.std then:</para>
|
|
||||||
|
|
||||||
<itemizedlist>
|
|
||||||
<listitem>
|
|
||||||
<para>If the log level is followed by "!' then all rules in
|
|
||||||
the action are logged at the log level.</para>
|
|
||||||
</listitem>
|
|
||||||
|
|
||||||
<listitem>
|
|
||||||
<para>If the log level is not followed by "!" then only those
|
|
||||||
rules in the action that do not specify logging are logged at
|
|
||||||
the specified level.</para>
|
|
||||||
</listitem>
|
|
||||||
|
|
||||||
<listitem>
|
|
||||||
<para>The special log level <emphasis
|
|
||||||
role="bold">none!</emphasis> suppresses logging by the
|
|
||||||
action.</para>
|
|
||||||
</listitem>
|
|
||||||
</itemizedlist>
|
|
||||||
|
|
||||||
<para>You may also specify <emphasis role="bold">ULOG</emphasis>
|
|
||||||
or <emphasis role="bold">NFLOG</emphasis> (must be in upper case)
|
|
||||||
as a log level.This will log to the ULOG or NFLOG target for
|
|
||||||
routing to a separate log through use of ulogd (<ulink
|
|
||||||
url="http://www.netfilter.org/projects/ulogd/index.html">http://www.netfilter.org/projects/ulogd/index.html</ulink>).</para>
|
|
||||||
|
|
||||||
<para>Actions specifying logging may be followed by a log tag (a
|
|
||||||
string of alphanumeric characters) which is appended to the string
|
|
||||||
generated by the LOGPREFIX (in <ulink
|
|
||||||
url="shorewall.conf.html">shorewall.conf</ulink>(5)).</para>
|
|
||||||
|
|
||||||
<para>Example: ACCEPT:info:ftp would include 'ftp ' at the end of
|
|
||||||
the log prefix generated by the LOGPREFIX setting.</para>
|
|
||||||
</blockquote>
|
|
||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user