holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

remove some past versions hints and change "rfc1918" to "norfc1918"...

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3074 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
judas_iscariote 2005-11-26 20:05:45 +00:00
parent da92ac965b
commit f4079e05e3
1 changed files with 6 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
Shorewall-docs2/shorewall_setup_guide.xml
View File

@ -378,9 +378,8 @@ all all REJECT info</programlisting>
<caution> <caution>
<para>Do not connect the internal and external interface to the same hub <para>Do not connect the internal and external interface to the same hub
or switch except for testing AND you are running Shorewall version 1.4.7 or switch except for testing. You can test using this kind of
or later. When using these recent versions, you can test using this kind configuration if you specify the <emphasis
of configuration if you specify the <emphasis
role="bold">arp_filter</emphasis> option or the <emphasis role="bold">arp_filter</emphasis> option or the <emphasis
role="bold">arp_ignore</emphasis> option in role="bold">arp_ignore</emphasis> option in
<filename>/etc/shorewall/interfaces</filename> for all interfaces <filename>/etc/shorewall/interfaces</filename> for all interfaces
@ -948,9 +947,8 @@ loc eth2 detect</programlisting>
netmask 255.255.255.248.</para> netmask 255.255.255.248.</para>
</example> </example>
<para>Beginning with Shorewall 1.4.6, /sbin/shorewall supports an ipcalc <para> /sbin/shorewall supports an ipcalc command that automatically
command that automatically calculates information about a calculates information about a [sub]network.</para>
[sub]network.</para>
<example> <example>
<title>Using the <command>ipcalc </command>command</title> <title>Using the <command>ipcalc </command>command</title>
@ -1235,10 +1233,6 @@ tcpdump: listening on eth2
they are not, change them appropriately:</para> they are not, change them appropriately:</para>
<itemizedlist> <itemizedlist>
<listitem>
<para>NAT_ENABLED=Yes (Shorewall versions earlier than 1.4.6)</para>
</listitem>
<listitem> <listitem>
<para>IP_FORWARDING=On</para> <para>IP_FORWARDING=On</para>
</listitem> </listitem>
@ -1818,7 +1812,7 @@ ACCEPT net $FW tcp ssh #SSH to the
<quote>options</quote> will be very site-specific).</para> <quote>options</quote> will be very site-specific).</para>
<programlisting>#ZONE INTERFACE BROADCAST OPTIONS <programlisting>#ZONE INTERFACE BROADCAST OPTIONS
net eth0 detect rfc1918,routefilter net eth0 detect norfc1918,routefilter
loc eth1 detect loc eth1 detect
dmz eth2 detect</programlisting> dmz eth2 detect</programlisting>
@ -1830,7 +1824,7 @@ dmz eth2 detect</programlisting>
interfaces.</para> interfaces.</para>
<programlisting>#ZONE INTERFACE BROADCAST OPTIONS <programlisting>#ZONE INTERFACE BROADCAST OPTIONS
net eth0 192.0.2.255 rfc1918 net eth0 192.0.2.255 norfc1918
loc eth1 192.168.201.7 loc eth1 192.168.201.7
dmz eth2 192.168.202.7</programlisting> dmz eth2 192.168.202.7</programlisting>