holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Make Ed Suominen's Patch Console-friendly

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3415 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-02-01 16:03:25 +00:00
parent fc29c70f38
commit eb68788e8f
1 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
Shorewall/tcrules
View File

@ -84,24 +84,24 @@
# SOURCE Source of the packet. A comma-separated list of # SOURCE Source of the packet. A comma-separated list of
# interface names, IP addresses, MAC addresses and/or # interface names, IP addresses, MAC addresses and/or
# subnets for packets being routed through a common path. # subnets for packets being routed through a common path.
# For example, all packets for connections masqueraded to # For example, all packets for connections masqueraded
# eth0 from other interfaces can be matched in a single rule # to eth0 from other interfaces can be matched in a
# with several alternative SOURCE criteria. However, a # single rule with several alternative SOURCE criteria.
# connection whose packets gets to eth0 in a different way, # However, a connection whose packets gets to eth0 in a
# e.g., direct from the firewall itself, needs a different # different way, e.g., direct from the firewall itself,
# rule. # needs a different rule.
# #
# Accordingly, use $FW in its own separate rule for packets # Accordingly, use $FW in its own separate rule for
# originating on the firewall. In such a rule, the MARK # packets originating on the firewall. In such a rule,
# column may NOT specify either ":P" or ":F" because marking # the MARK column may NOT specify either ":P" or ":F"
# for firewall-originated packets always occurs in the OUTPUT # because marking for firewall-originated packets
# chain. # always occurs in the OUTPUT chain.
# #
# MAC addresses must be prefixed with "~" and use # MAC addresses must be prefixed with "~" and use
# "-" as a separator. # "-" as a separator.
# #
# Example: ~00-A0-C9-15-39-78 # Example: ~00-A0-C9-15-39-78
#
# DEST Destination of the packet. Comma separated list of # DEST Destination of the packet. Comma separated list of
# IP addresses and/or subnets. If your kernel and # IP addresses and/or subnets. If your kernel and
# iptables include iprange match support, IP address # iptables include iprange match support, IP address