From c5a98fe4da3ae4fef3b042d34dc7e924ebe3338e Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Wed, 6 May 2009 07:14:31 -0700
Subject: [PATCH] Clarify start/stop and ipsets

---
 docs/Dynamic.xml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/docs/Dynamic.xml b/docs/Dynamic.xml
index 24a2b6f16..0839a71be 100644
--- a/docs/Dynamic.xml
+++ b/docs/Dynamic.xml
@@ -139,8 +139,14 @@ eth0:
     <title>Dynamic Zone Contents and Shorewall stop/start/restart</title>
 
     <para>The contents of a dynamic zone survive <command>shorewall
-    stop/shorewall start</command> and <command>shorewall
-    restart</command>.</para>
+    stop/shorewall start</command> and <command>shorewall restart</command>.
+    During <command>shorewall stop</command>, the contents of the ipsets are
+    saved in the file <filename>${VARDIR}/ipsets.save</filename> (usually
+    <filename>/var/lib/shorewall/ipsets.save</filename>). During
+    <command>shorewall start</command>, the contents of that file are restored
+    to the sets. During both <command>shorewall start</command> and
+    <command>shorewall restart</command>, any new ipsets required as a result
+    of a configuration change are added.</para>
   </section>
 
   <section>