Make Ed Suominen's Patch Console-friendly

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3415 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-02-01 16:03:25 +00:00
parent fc29c70f38
commit eb68788e8f

View File

@ -84,24 +84,24 @@
# SOURCE Source of the packet. A comma-separated list of
# interface names, IP addresses, MAC addresses and/or
# subnets for packets being routed through a common path.
# For example, all packets for connections masqueraded to
# eth0 from other interfaces can be matched in a single rule
# with several alternative SOURCE criteria. However, a
# connection whose packets gets to eth0 in a different way,
# e.g., direct from the firewall itself, needs a different
# rule.
# For example, all packets for connections masqueraded
# to eth0 from other interfaces can be matched in a
# single rule with several alternative SOURCE criteria.
# However, a connection whose packets gets to eth0 in a
# different way, e.g., direct from the firewall itself,
# needs a different rule.
#
# Accordingly, use $FW in its own separate rule for packets
# originating on the firewall. In such a rule, the MARK
# column may NOT specify either ":P" or ":F" because marking
# for firewall-originated packets always occurs in the OUTPUT
# chain.
# Accordingly, use $FW in its own separate rule for
# packets originating on the firewall. In such a rule,
# the MARK column may NOT specify either ":P" or ":F"
# because marking for firewall-originated packets
# always occurs in the OUTPUT chain.
#
# MAC addresses must be prefixed with "~" and use
# "-" as a separator.
#
# Example: ~00-A0-C9-15-39-78
#
# DEST Destination of the packet. Comma separated list of
# IP addresses and/or subnets. If your kernel and
# iptables include iprange match support, IP address