From f289fed0a42272dbfed8e24f7213d0c00bfdfe3c Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Thu, 7 Jun 2007 15:17:31 +0000
Subject: [PATCH] Update manpages -- take 2

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6481 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 manpages/shorewall-rules.xml | 25 ++++++++++++++++++-------
 1 file changed, 18 insertions(+), 7 deletions(-)

diff --git a/manpages/shorewall-rules.xml b/manpages/shorewall-rules.xml
index 54f04515e..52d4df621 100644
--- a/manpages/shorewall-rules.xml
+++ b/manpages/shorewall-rules.xml
@@ -591,15 +591,26 @@
           intra-zone traffic is affected.</para>
 
           <para>If the DEST <replaceable>zone</replaceable> is a bport zone,
-          then the SOURCE <replaceable>zone</replaceable> must be
-          <option>all</option>, another bport zone associated with the same
-          bridge, or it must be an ipv4 zone that is associated with only the
-          same bridge.</para>
+          then either:<itemizedlist>
+              <listitem>
+                <para>the SOURCE must be <option>all[+][-]</option>, or</para>
+              </listitem>
+
+              <listitem>
+                <para>the SOURCE <replaceable>zone</replaceable> must be
+                another bport zone associated with the same bridge, or</para>
+              </listitem>
+
+              <listitem>
+                <para>the SOURCE <replaceable>zone</replaceable> must be an
+                ipv4 zone that is associated with only the same bridge.</para>
+              </listitem>
+            </itemizedlist></para>
 
           <para>Except when <emphasis role="bold">all</emphasis>[<emphasis
-          role="bold">+</emphasis>] is specified, the server may be further
-          restricted to a particular network, host or interface by appending
-          ":" and the network, host or interface. See <emphasis
+          role="bold">+]|[-</emphasis>] is specified, the server may be
+          further restricted to a particular network, host or interface by
+          appending ":" and the network, host or interface. See <emphasis
           role="bold">SOURCE</emphasis> above.</para>
 
           <para>You may exclude certain hosts from the set already defined