From ff5e95b1640924c260301694f05c56a055bdca84 Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Wed, 29 Jul 2009 15:09:32 -0700
Subject: [PATCH] Update manpages to mention mixed type nesting

---
 manpages/shorewall-zones.xml   | 5 +++++
 manpages6/shorewall6-zones.xml | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/manpages/shorewall-zones.xml b/manpages/shorewall-zones.xml
index c639908f7..17a7ef65c 100644
--- a/manpages/shorewall-zones.xml
+++ b/manpages/shorewall-zones.xml
@@ -109,6 +109,11 @@ c:a,b     ipv4</programlisting>
           url="shorewall.conf.html">shorewall.conf</ulink>(5) can also create
           implicit CONTINUE policies to/from the subzone.</para>
 
+          <para>Where an <emphasis role="bold">ipsec</emphasis> zone is
+          explicitly included as a child of an <emphasis
+          role="bold">ipv4</emphasis> zone, the ruleset allows CONTINUE
+          policies (explicit or implicit) to work as expected. </para>
+
           <para>In the future, Shorewall may make additional use of nesting
           information.</para>
         </listitem>
diff --git a/manpages6/shorewall6-zones.xml b/manpages6/shorewall6-zones.xml
index 304c30c92..0fb8bd040 100644
--- a/manpages6/shorewall6-zones.xml
+++ b/manpages6/shorewall6-zones.xml
@@ -109,6 +109,11 @@ c:a,b     ipv6</programlisting>
           url="shorewall6.conf.html">shorewall6.conf</ulink>(5) can also
           create implicit CONTINUE policies to/from the subzone.</para>
 
+          <para>Where an <emphasis role="bold">ipsec</emphasis> zone is
+          explicitly included as a child of an <emphasis
+          role="bold">ipv6</emphasis> zone, the ruleset allows CONTINUE
+          policies (explicit or implicit) to work as expected.</para>
+
           <para>In the future, Shorewall6 may make additional use of nesting
           information.</para>
         </listitem>