holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Update the helpers article to mention how to avoid loading a helper.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2015-04-17 15:22:38 -07:00
parent 6cb3004a39
commit ccccd847c8
1 changed files with 30 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
docs/Helpers.xml
View File

@ -114,9 +114,11 @@
nf_nat_<replaceable>application</replaceable>; more about that nf_nat_<replaceable>application</replaceable>; more about that
below.</para> below.</para>
<para>The modules are not auto-loaded and must be loaded explicitly <para>Prior to Shorewall 4.5.7, helper modules were not auto-loaded and
using the <command>modprob</command> or <command>insmod</command> must be loaded explicitly using the <command>modprob</command> or
utilities.</para> <command>insmod</command> utilities. Beginning with Shorewall 4.5.7,
these modules are loaded when Shorewall is determining the capabilities
of your system.</para>
<para>Many of the modules allow parameters to be specified when the <para>Many of the modules allow parameters to be specified when the
module is loaded. Among the common parameters is the ports parameter module is loaded. Among the common parameters is the ports parameter
@ -280,14 +282,23 @@
</listitem> </listitem>
</varlistentry> </varlistentry>
<varlistentry>
<term>DONT_LOAD</term>
<listitem>
<para>This is a comma-separated list of modules that you
specifically don't want Shorewall to load.</para>
</listitem>
</varlistentry>
<varlistentry> <varlistentry>
<term>HELPERS</term> <term>HELPERS</term>
<listitem> <listitem>
<para>This option was added in Shorewall 4.5.7 and lists the <para>This option was added in Shorewall 4.5.7 and lists the
modules to be enabled for association with connections. This modules to be enabled for association with connections
option is fully functional only on systems running kernel 3.5 or (comma-separated). This option is fully functional only on systems
later.</para> running kernel 3.5 or later.</para>
<para>The module names allowed in this list are <emphasis <para>The module names allowed in this list are <emphasis
role="bold">amanda</emphasis>, <emphasis role="bold">amanda</emphasis>, <emphasis
@ -297,7 +308,19 @@
role="bold">pptp</emphasis>, <emphasis role="bold">pptp</emphasis>, <emphasis
role="bold">sane</emphasis>, <emphasis role="bold">sip</emphasis>, role="bold">sane</emphasis>, <emphasis role="bold">sip</emphasis>,
<emphasis role="bold">snmp</emphasis> and <emphasis <emphasis role="bold">snmp</emphasis> and <emphasis
role="bold">tftp</emphasis>.</para> role="bold">tftp</emphasis>. If you don't want a particular helper
module loaded, then:</para>
<itemizedlist>
<listitem>
<para>List it in the DONT_LOAD option; and</para>
</listitem>
<listitem>
<para>Explicitly list those helpers that you do want in
HELPERS.</para>
</listitem>
</itemizedlist>
</listitem> </listitem>
</varlistentry> </varlistentry>