diff --git a/Shorewall-docs2/Documentation.xml b/Shorewall-docs2/Documentation.xml index 60fe0769a..4e1f885cf 100644 --- a/Shorewall-docs2/Documentation.xml +++ b/Shorewall-docs2/Documentation.xml @@ -15,10 +15,10 @@ - 2004-12-31 + 2005-01-26 - 2001-2004 + 2001-2005 Thomas M. Eastep @@ -638,6 +638,14 @@ dmz DMZ Demilitarized zone address reserved by the IANA or by other RFCs (other than 1918) are dropped after being optionally logged. See the /etc/shorewall/bogons file documentation below. + + I personally recommend against using the nobogons + option. The IPV4 address space is being rapidly depleated so + the benefit of blocking traffic from unallocated address + ranges is minimal. Plus the rate at which address blocks are + being assigned causes your /etc/shorewall/bogons file to + become out of date with the result that legitimate traffic + gets blocked. @@ -4109,4 +4117,4 @@ eth1 - - + \ No newline at end of file