diff --git a/Shorewall/tcrules b/Shorewall/tcrules index 8e1d5b53a..4a568b6c3 100755 --- a/Shorewall/tcrules +++ b/Shorewall/tcrules @@ -84,24 +84,24 @@ # SOURCE Source of the packet. A comma-separated list of # interface names, IP addresses, MAC addresses and/or # subnets for packets being routed through a common path. -# For example, all packets for connections masqueraded to -# eth0 from other interfaces can be matched in a single rule -# with several alternative SOURCE criteria. However, a -# connection whose packets gets to eth0 in a different way, -# e.g., direct from the firewall itself, needs a different -# rule. +# For example, all packets for connections masqueraded +# to eth0 from other interfaces can be matched in a +# single rule with several alternative SOURCE criteria. +# However, a connection whose packets gets to eth0 in a +# different way, e.g., direct from the firewall itself, +# needs a different rule. # -# Accordingly, use $FW in its own separate rule for packets -# originating on the firewall. In such a rule, the MARK -# column may NOT specify either ":P" or ":F" because marking -# for firewall-originated packets always occurs in the OUTPUT -# chain. +# Accordingly, use $FW in its own separate rule for +# packets originating on the firewall. In such a rule, +# the MARK column may NOT specify either ":P" or ":F" +# because marking for firewall-originated packets +# always occurs in the OUTPUT chain. # # MAC addresses must be prefixed with "~" and use # "-" as a separator. # # Example: ~00-A0-C9-15-39-78 -# + # DEST Destination of the packet. Comma separated list of # IP addresses and/or subnets. If your kernel and # iptables include iprange match support, IP address