holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Clean up description of CHECKSUM in the manpages.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2012-10-26 11:22:54 -07:00
parent e177916c12
commit e908473d29
2 changed files with 20 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
Shorewall/manpages/shorewall-tcrules.xml
View File

@ -194,12 +194,12 @@
assigned to packets on a round-robin fashion.</para> assigned to packets on a round-robin fashion.</para>
<para>When a mask is specified, the result of logically ANDing <para>When a mask is specified, the result of logically ANDing
the mark value with the mask must be the same as the mark value. each mark value with the mask must be the same as the mark
The least significant bit in the mask is used as an increment. value. The least significant bit in the mask is used as an
For example, if '0x200-0x400/0xff00' is specified, then the increment. For example, if '0x200-0x400/0xff00' is specified,
assigned mark values are 0x200, 0x300 and 0x400 in equal then the assigned mark values are 0x200, 0x300 and 0x400 in
proportions. If no mask is specified, then ( 2 ** MASK_BITS ) - equal proportions. If no mask is specified, then ( 2 **
1 is assumed (MASK_BITS is set in <ulink MASK_BITS ) - 1 is assumed (MASK_BITS is set in <ulink
url="shorewall.conf.html">shorewall.conf</ulink>(5)).</para> url="shorewall.conf.html">shorewall.conf</ulink>(5)).</para>
<para>May optionally be followed by <emphasis <para>May optionally be followed by <emphasis
@ -237,13 +237,7 @@
<para>If your kernel and iptables include CONNMARK support then <para>If your kernel and iptables include CONNMARK support then
you can also mark the connection rather than the packet.</para> you can also mark the connection rather than the packet.</para>
<para>The mark range may be optionally followed by "/" and a <para>The mark range and optional mask can then followed by one
mask value (used to determine those bits of the connection mark
to actually be set). When a mask is specified, the result of
logically ANDing the mark value with each of the masks must be
the same as the mark value.</para>
<para>The mark and optional mask are then followed by one
of:</para> of:</para>
<variablelist> <variablelist>
@ -350,9 +344,9 @@
<para><emphasis role="bold">CHECKSUM</emphasis></para> <para><emphasis role="bold">CHECKSUM</emphasis></para>
<para>Added in Shorewall 4.5.9. Compute and fill in the checksum <para>Added in Shorewall 4.5.9. Compute and fill in the checksum
in a packet that lacks a checksum. This is particularly useful, in a packet that lacks a checksum. This is particularly useful
if you need to work around old applications such as dhcp if you need to work around old applications, such as dhcp
clients, that do not work well with check‐ sum offloads, but clients, that do not work well with checksum offloads, but you
don't want to disable checksum offload in your device.</para> don't want to disable checksum offload in your device.</para>
<para>Requires 'Checksum Target' support in your kernel and <para>Requires 'Checksum Target' support in your kernel and

20
Shorewall6/manpages/shorewall6-tcrules.xml
View File

@ -194,12 +194,12 @@
assigned to packets on a round-robin fashion.</para> assigned to packets on a round-robin fashion.</para>
<para>When a mask is specified, the result of logically ANDing <para>When a mask is specified, the result of logically ANDing
the mark value with the mask must be the same as the mark value. each mark value with the mask must be the same as the mark
The least significant bit in the mask is used as an increment. value. The least significant bit in the mask is used as an
For example, if '0x200-0x400/0xff00' is specified, then the increment. For example, if '0x200-0x400/0xff00' is specified,
assigned mark values are 0x200, 0x300 and 0x400 in equal then the assigned mark values are 0x200, 0x300 and 0x400 in
proportions. If no mask is specified, then ( 2 ** MASK_BITS ) - equal proportions. If no mask is specified, then ( 2 **
1 is assumed (MASK_BITS is set in <ulink MASK_BITS ) - 1 is assumed (MASK_BITS is set in <ulink
url="shorewall6.conf.html">shorewall6.conf</ulink>(5)).</para> url="shorewall6.conf.html">shorewall6.conf</ulink>(5)).</para>
<para>May optionally be followed by <emphasis <para>May optionally be followed by <emphasis
@ -243,7 +243,7 @@
logically ANDing the mark value with each of the masks must be logically ANDing the mark value with each of the masks must be
the same as the mark value.</para> the same as the mark value.</para>
<para>The mark and optional mask are then followed by one <para>The mark range and optional mask may followed by one
of:</para> of:</para>
<variablelist> <variablelist>
@ -350,9 +350,9 @@
<para><emphasis role="bold">CHECKSUM</emphasis></para> <para><emphasis role="bold">CHECKSUM</emphasis></para>
<para>Added in Shorewall 4.5.9. Compute and fill in the checksum <para>Added in Shorewall 4.5.9. Compute and fill in the checksum
in a packet that lacks a checksum. This is particularly useful, in a packet that lacks a checksum. This is particularly useful
if you need to work around old applications such as dhcp if you need to work around old applications, such as dhcp
clients, that do not work well with check‐ sum offloads, but clients, that do not work well with checksum offloads, but you
don't want to disable checksum offload in your device.</para> don't want to disable checksum offload in your device.</para>
<para>Requires 'Checksum Target' support in your kernel and <para>Requires 'Checksum Target' support in your kernel and