diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index 950aea5b4..7c90b0044 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -1959,6 +1959,19 @@ iptables: Invalid argument
+
+
+ (FAQ 78) After restart and bootup of my Debian firewall, all
+ traffic is blocked for hosts behind the firewall trying to connect out
+ onto the net or through the vpn (although i can reach the internal
+ firewall interface and obtain dumps etc). Once I issue 'shorewall clear'
+ followed by 'shorewall restart' it then works, despite the config not
+ changing
+
+ Answer: Set IP_FORWARDING=On in
+ /etc/shorewall/shorewall.conf.
+
@@ -1998,19 +2011,6 @@ iptables: Invalid argument
will have mark = 1 and will be sent via ISP1. That will work whether
balance is specified or not!
-
-
- (FAQ 78) After restart and bootup of my Debian firewall, all
- traffic is blocked for hosts behind the firewall trying to connect out
- onto the net or through the vpn (although i can reach the internal
- firewall interface and obtain dumps etc). Once I issue 'shorewall clear'
- followed by 'shorewall restart' it then works, despite the config not
- changing
-
- Answer: Set IP_FORWARDING=On in
- /etc/shorewall/shorewall.conf.
-
diff --git a/docs/ScalabilityAndPerformance.xml b/docs/ScalabilityAndPerformance.xml
index 9e3554c71..bb0447ada 100644
--- a/docs/ScalabilityAndPerformance.xml
+++ b/docs/ScalabilityAndPerformance.xml
@@ -109,11 +109,11 @@
Scaling within the Shorewall Code
- Shorewall is written entirely in Bourne Shell. While this allows
- Shorewall to run on a wide range of distributions (included embedded
- ones), the shell programming environment is not ideal for writing the
- compiler portion of Shorewall. As a consequence, the code must repeatedly
- perform sequential searches of lists. If a list has Shorewall-shell is written entirely in Bourne Shell. While this
+ allows Shorewall to run on a wide range of distributions (included
+ embedded ones), the shell programming environment is not ideal for writing
+ the compiler portion of Shorewall. As a consequence, the code must
+ repeatedly perform sequential searches of lists. If a list has N elements and a sequential search is made for each
of those elements, then the number of comparisons is 1 + 2 + 3 + .... +
N = N *
@@ -157,8 +157,8 @@
- Use NONE policies wherever appropriate. This helps especially
- in the rules activation phase of both script compilation and
+ Use NONE policies wherever appropriate. This helps especially in
+ the rules activation phase of both script compilation and
execution.
@@ -209,4 +209,4 @@ ACCEPT $HOSTS
# PORT PORT(S) DEST LIMIT GROUP
AcceptHosts net $FW tcp 22
-
+
\ No newline at end of file