diff --git a/docs/FAQ.xml b/docs/FAQ.xml index 950aea5b4..7c90b0044 100644 --- a/docs/FAQ.xml +++ b/docs/FAQ.xml @@ -1959,6 +1959,19 @@ iptables: Invalid argument + +
+ (FAQ 78) After restart and bootup of my Debian firewall, all + traffic is blocked for hosts behind the firewall trying to connect out + onto the net or through the vpn (although i can reach the internal + firewall interface and obtain dumps etc). Once I issue 'shorewall clear' + followed by 'shorewall restart' it then works, despite the config not + changing + + Answer: Set IP_FORWARDING=On in + /etc/shorewall/shorewall.conf. +
@@ -1998,19 +2011,6 @@ iptables: Invalid argument will have mark = 1 and will be sent via ISP1. That will work whether balance is specified or not!
- -
- (FAQ 78) After restart and bootup of my Debian firewall, all - traffic is blocked for hosts behind the firewall trying to connect out - onto the net or through the vpn (although i can reach the internal - firewall interface and obtain dumps etc). Once I issue 'shorewall clear' - followed by 'shorewall restart' it then works, despite the config not - changing - - Answer: Set IP_FORWARDING=On in - /etc/shorewall/shorewall.conf. -
diff --git a/docs/ScalabilityAndPerformance.xml b/docs/ScalabilityAndPerformance.xml index 9e3554c71..bb0447ada 100644 --- a/docs/ScalabilityAndPerformance.xml +++ b/docs/ScalabilityAndPerformance.xml @@ -109,11 +109,11 @@
Scaling within the Shorewall Code - Shorewall is written entirely in Bourne Shell. While this allows - Shorewall to run on a wide range of distributions (included embedded - ones), the shell programming environment is not ideal for writing the - compiler portion of Shorewall. As a consequence, the code must repeatedly - perform sequential searches of lists. If a list has Shorewall-shell is written entirely in Bourne Shell. While this + allows Shorewall to run on a wide range of distributions (included + embedded ones), the shell programming environment is not ideal for writing + the compiler portion of Shorewall. As a consequence, the code must + repeatedly perform sequential searches of lists. If a list has N elements and a sequential search is made for each of those elements, then the number of comparisons is 1 + 2 + 3 + .... + N = N * @@ -157,8 +157,8 @@ - Use NONE policies wherever appropriate. This helps especially - in the rules activation phase of both script compilation and + Use NONE policies wherever appropriate. This helps especially in + the rules activation phase of both script compilation and execution. @@ -209,4 +209,4 @@ ACCEPT $HOSTS # PORT PORT(S) DEST LIMIT GROUP AcceptHosts net $FW tcp 22
- + \ No newline at end of file