diff --git a/docs/Helpers.xml b/docs/Helpers.xml
index b40503945..7bfde78c7 100644
--- a/docs/Helpers.xml
+++ b/docs/Helpers.xml
@@ -114,9 +114,11 @@
nf_nat_application; more about that
below.
- The modules are not auto-loaded and must be loaded explicitly
- using the modprob or insmod
- utilities.
+ Prior to Shorewall 4.5.7, helper modules were not auto-loaded and
+ must be loaded explicitly using the modprob or
+ insmod utilities. Beginning with Shorewall 4.5.7,
+ these modules are loaded when Shorewall is determining the capabilities
+ of your system.
Many of the modules allow parameters to be specified when the
module is loaded. Among the common parameters is the ports parameter
@@ -280,14 +282,23 @@
+
+ DONT_LOAD
+
+
+ This is a comma-separated list of modules that you
+ specifically don't want Shorewall to load.
+
+
+
HELPERS
This option was added in Shorewall 4.5.7 and lists the
- modules to be enabled for association with connections. This
- option is fully functional only on systems running kernel 3.5 or
- later.
+ modules to be enabled for association with connections
+ (comma-separated). This option is fully functional only on systems
+ running kernel 3.5 or later.
The module names allowed in this list are amanda, pptp, sane, sip,
snmp and tftp.
+ role="bold">tftp. If you don't want a particular helper
+ module loaded, then:
+
+
+
+ List it in the DONT_LOAD option; and
+
+
+
+ Explicitly list those helpers that you do want in
+ HELPERS.
+
+