diff --git a/docs/Helpers.xml b/docs/Helpers.xml index b40503945..7bfde78c7 100644 --- a/docs/Helpers.xml +++ b/docs/Helpers.xml @@ -114,9 +114,11 @@ nf_nat_application; more about that below. - The modules are not auto-loaded and must be loaded explicitly - using the modprob or insmod - utilities. + Prior to Shorewall 4.5.7, helper modules were not auto-loaded and + must be loaded explicitly using the modprob or + insmod utilities. Beginning with Shorewall 4.5.7, + these modules are loaded when Shorewall is determining the capabilities + of your system. Many of the modules allow parameters to be specified when the module is loaded. Among the common parameters is the ports parameter @@ -280,14 +282,23 @@ + + DONT_LOAD + + + This is a comma-separated list of modules that you + specifically don't want Shorewall to load. + + + HELPERS This option was added in Shorewall 4.5.7 and lists the - modules to be enabled for association with connections. This - option is fully functional only on systems running kernel 3.5 or - later. + modules to be enabled for association with connections + (comma-separated). This option is fully functional only on systems + running kernel 3.5 or later. The module names allowed in this list are amanda, pptp, sane, sip, snmp and tftp. + role="bold">tftp. If you don't want a particular helper + module loaded, then: + + + + List it in the DONT_LOAD option; and + + + + Explicitly list those helpers that you do want in + HELPERS. + +