forked from extern/shorewall_code
Correct some typos in the .conf manpages
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
08d29edf1a
commit
eb70234c52
@ -412,8 +412,9 @@
|
|||||||
role="bold">Yes</emphasis>|<emphasis role="bold">No</emphasis>]</term>
|
role="bold">Yes</emphasis>|<emphasis role="bold">No</emphasis>]</term>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>If set, the behavior of the 'start' command is changed; if no
|
<para>If set, the behavior of the <command>start</command> and
|
||||||
files in /etc/shorewall have been changed since the last successful
|
<command>restart</command> commands are changed; if no files in
|
||||||
|
/etc/shorewall have been changed since the last successful
|
||||||
<command>start</command> or <command>restart</command> command, then
|
<command>start</command> or <command>restart</command> command, then
|
||||||
the compilation step is skipped and the compiled script that
|
the compilation step is skipped and the compiled script that
|
||||||
executed the last <command>start</command> or
|
executed the last <command>start</command> or
|
||||||
@ -779,13 +780,14 @@
|
|||||||
and the policy is enforced in that chain. For example, if the policy
|
and the policy is enforced in that chain. For example, if the policy
|
||||||
entry is<programlisting>#SOURCE DEST POLICY LOG
|
entry is<programlisting>#SOURCE DEST POLICY LOG
|
||||||
# LEVEL
|
# LEVEL
|
||||||
net all DROP info</programlisting>then the chain name is 'net2all'
|
net all DROP info</programlisting>then the chain name is 'net-all'
|
||||||
which is also the chain named in Shorewall log messages generated as
|
('net2all if ZONE2ZONE=2) which is also the chain named in Shorewall
|
||||||
a result of the policy. If EXPAND_POLICIES=Yes, then Shorewall will
|
log messages generated as a result of the policy. If
|
||||||
create a separate chain for each pair of zones covered by the
|
EXPAND_POLICIES=Yes, then Shorewall will create a separate chain for
|
||||||
policy. This makes the resulting log messages easier to interpret
|
each pair of zones covered by the policy. This makes the resulting
|
||||||
since the chain in the messages will have a name of the form 'a2b'
|
log messages easier to interpret since the chain in the messages
|
||||||
where 'a' is the SOURCE zone and 'b' is the DEST zone.</para>
|
will have a name of the form 'a2b' where 'a' is the SOURCE zone and
|
||||||
|
'b' is the DEST zone.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
|
|
||||||
@ -896,7 +898,7 @@ net all DROP info</programlisting>then the chain name is 'net2all'
|
|||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>Added in Shorewall 4.5.7. This option lists the Netfilter
|
<para>Added in Shorewall 4.5.7. This option lists the Netfilter
|
||||||
application helps that are to be enabled. If not specified, the
|
application helpers that are to be enabled. If not specified, the
|
||||||
default is to enable all helpers.</para>
|
default is to enable all helpers.</para>
|
||||||
|
|
||||||
<para>Possible values for <replaceable>helper</replaceable>
|
<para>Possible values for <replaceable>helper</replaceable>
|
||||||
@ -1270,7 +1272,7 @@ net all DROP info</programlisting>then the chain name is 'net2all'
|
|||||||
<para>Added in Shorewall 4.4.20. If not specified, the default is
|
<para>Added in Shorewall 4.4.20. If not specified, the default is
|
||||||
Yes which preserves the legacy behavior of <command>start
|
Yes which preserves the legacy behavior of <command>start
|
||||||
-f</command> (the modification times of the files in
|
-f</command> (the modification times of the files in
|
||||||
<filename>/etc/shorewall</filename> are compare with that of
|
<filename>/etc/shorewall</filename> are compared with that of
|
||||||
<filename>/var/lib/shorewall/restore)</filename>. If set to No, then
|
<filename>/var/lib/shorewall/restore)</filename>. If set to No, then
|
||||||
the times are compared with that of /var/lib/shorewall/firewall,
|
the times are compared with that of /var/lib/shorewall/firewall,
|
||||||
which is consistent with the way that <command>restart -f</command>
|
which is consistent with the way that <command>restart -f</command>
|
||||||
|
@ -342,7 +342,7 @@
|
|||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>If set, the behavior of the <command>start</command> and
|
<para>If set, the behavior of the <command>start</command> and
|
||||||
<command>restart</command> commands is change; if no files in
|
<command>restart</command> commands is changed; if no files in
|
||||||
<filename><filename
|
<filename><filename
|
||||||
class="directory">/etc/shorewall</filename></filename> have been
|
class="directory">/etc/shorewall</filename></filename> have been
|
||||||
changed since the last successful <command>start</command> or
|
changed since the last successful <command>start</command> or
|
||||||
@ -665,13 +665,14 @@
|
|||||||
and the policy is enforced in that chain. For example, if the policy
|
and the policy is enforced in that chain. For example, if the policy
|
||||||
entry is<programlisting>#SOURCE DEST POLICY LOG
|
entry is<programlisting>#SOURCE DEST POLICY LOG
|
||||||
# LEVEL
|
# LEVEL
|
||||||
net all DROP info</programlisting>then the chain name is 'net2all'
|
net all DROP info</programlisting>then the chain name is 'net-all'
|
||||||
which is also the chain named in Shorewall log messages generated as
|
("net2all" if ZONE2ZONE=2) which is also the chain named in
|
||||||
a result of the policy. If EXPAND_POLICIES=Yes, then Shorewall will
|
Shorewall log messages generated as a result of the policy. If
|
||||||
create a separate chain for each pair of zones covered by the
|
EXPAND_POLICIES=Yes, then Shorewall will create a separate chain for
|
||||||
policy. This makes the resulting log messages easier to interpret
|
each pair of zones covered by the policy. This makes the resulting
|
||||||
since the chain in the messages will have a name of the form 'a2b'
|
log messages easier to interpret since the chain in the messages
|
||||||
where 'a' is the SOURCE zone and 'b' is the DEST zone.</para>
|
will have a name of the form 'a2b' where 'a' is the SOURCE zone and
|
||||||
|
'b' is the DEST zone.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
|
|
||||||
@ -782,7 +783,7 @@ net all DROP info</programlisting>then the chain name is 'net2all'
|
|||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>Added in Shorewall 4.5.7. This option lists the Netfilter
|
<para>Added in Shorewall 4.5.7. This option lists the Netfilter
|
||||||
application helps that are to be enabled. If not specified, the
|
application helpers that are to be enabled. If not specified, the
|
||||||
default is to enable all helpers.</para>
|
default is to enable all helpers.</para>
|
||||||
|
|
||||||
<para>Possible values for <replaceable>helper</replaceable>
|
<para>Possible values for <replaceable>helper</replaceable>
|
||||||
@ -1122,7 +1123,7 @@ net all DROP info</programlisting>then the chain name is 'net2all'
|
|||||||
<para>Added in Shorewall6 4.4.20. If not specified, the default is
|
<para>Added in Shorewall6 4.4.20. If not specified, the default is
|
||||||
Yes which preserves the legacy behavior of <command>start
|
Yes which preserves the legacy behavior of <command>start
|
||||||
-f</command> (the modification times of the files in
|
-f</command> (the modification times of the files in
|
||||||
<filename>/etc/shorewall6</filename> are compare with that of
|
<filename>/etc/shorewall6</filename> are compared with that of
|
||||||
<filename>/var/lib/shorewall6/restore</filename>). If set to No,
|
<filename>/var/lib/shorewall6/restore</filename>). If set to No,
|
||||||
then the times are compared with that of
|
then the times are compared with that of
|
||||||
/var/lib/shorewall6/firewall, which is consistent with the way that
|
/var/lib/shorewall6/firewall, which is consistent with the way that
|
||||||
|
Loading…
Reference in New Issue
Block a user