diff --git a/Shorewall/manpages/shorewall.conf.xml b/Shorewall/manpages/shorewall.conf.xml index 78c13378b..7ea1541a3 100644 --- a/Shorewall/manpages/shorewall.conf.xml +++ b/Shorewall/manpages/shorewall.conf.xml @@ -74,6 +74,20 @@ and can be configured to log all Shorewall messages to their own log file. + + If you want to specify parameters to ULOG or NFLOG (e.g., + NFLOG(1,0,1)), then you must either quote the setting or you must escape + the parentheses. + + Examples: + + MACLIST_LOG_LEVEL="NFLOG(1,0,1)" + + or + + MACLIST_LOG_LEVEL=NFLOG\(1,0,1\) + + Beginning with Shorewall 4.4.22, LOGMARK is also a valid level which logs the packet's mark value along with the other usual information. The syntax is: diff --git a/Shorewall6/manpages/shorewall6.conf.xml b/Shorewall6/manpages/shorewall6.conf.xml index 57a51d72f..f10ebf973 100644 --- a/Shorewall6/manpages/shorewall6.conf.xml +++ b/Shorewall6/manpages/shorewall6.conf.xml @@ -73,6 +73,20 @@ and can be configured to log all Shorewall6 message to their own log file + + If you want to specify parameters to ULOG or NFLOG (e.g., + NFLOG(1,0,1)), then you must either quote the setting or you must escape + the parentheses. + + Examples: + + MACLIST_LOG_LEVEL="NFLOG(1,0,1)" + + or + + MACLIST_LOG_LEVEL=NFLOG\(1,0,1\) + + The following options may be set in shorewall6.conf.