diff --git a/docs/Introduction.xml b/docs/Introduction.xml index 22c90a711..2e1609e02 100644 --- a/docs/Introduction.xml +++ b/docs/Introduction.xml @@ -183,7 +183,7 @@ dmz ipv4 that file as follows: #ZONE INTERFACE BROADCAST OPTIONS -net eth0 detect dhcp,routefilter,norfc1918 +net eth0 detect dhcp,routefilter loc eth1 detect dmz eth2 detect @@ -252,14 +252,14 @@ dmz eth2 detect first policy in /etc/shorewall/policy that matches the request is applied. If there is a default action defined - for the policy in /etc/shorewall/actions (or - /usr/share/shorewall/actions.std) then that action is - invoked before the policy is enforced. In the standard Shorewall - distribution, the DROP policy has a default action called Drop and the REJECT policy has a default action - called Reject. Default actions are used - primarily to discard packets silently so that they don't clutter up your - log. + for the policy in /etc/shorewall/shorewall.conf + then that action is invoked before the policy is enforced. In the standard + Shorewall distribution, the DROP policy has a default action called + Drop and the REJECT policy has a default + action called Reject. Default actions are + used primarily to discard packets silently so that they don't clutter up + your log. The /etc/shorewall/policy @@ -271,7 +271,7 @@ all all REJECT infoIn the three-interface sample, the line below is included but commented out. If you want your firewall system to have full access to servers on the Internet, uncomment that line. #SOURCE DEST POLICY LOG LEVEL LIMIT:BURST -$FW net ACCEPT The above policy will: +$FW net ACCEPT The above policies will: Allow all connection requests from your local network to the @@ -390,6 +390,21 @@ ACCEPT net $FW tcp 22 Shorewall-lite. + + In Shorewall 4.2.4, two additional packages were added: + + + + Shorewall6 - The utilities + necessary to control and configure an + IPv6 firewall. + + + + Shorewall6-lite - The IPv6 + equivalent of Shorewall-lite. + +