shorewall-files.xml (shorewall-docs-xml-5.2.3.6.tar.bz2) | : | shorewall-files.xml (shorewall-docs-xml-5.2.6.tar.bz2) | ||
---|---|---|---|---|
skipping to change at line 723 | skipping to change at line 723 | |||
<programlisting> ACCEPT net $FW { proto=tcp, dport=22, comment="Accep t \"SSH\"" }</programlisting> | <programlisting> ACCEPT net $FW { proto=tcp, dport=22, comment="Accep t \"SSH\"" }</programlisting> | |||
<para>As shown in that example, when the comment contains whitespace, it | <para>As shown in that example, when the comment contains whitespace, it | |||
must be enclosed in double quotes and any embedded double quotes must be | must be enclosed in double quotes and any embedded double quotes must be | |||
escaped using a backslash ("\").</para> | escaped using a backslash ("\").</para> | |||
</refsect1> | </refsect1> | |||
<refsect1> | <refsect1> | |||
<title>Time Columns</title> | <title>Time Columns</title> | |||
<para>Several of the files include a TIME column that allows you to specify | <para>Several of the files include a TIME column that allows you to | |||
times when the rule is to be applied. Contents of this column is a list of | specify times when the rule is to be applied. Contents of this column is a | |||
<replaceable>timeelement</replaceable>s separated by apersands | list of <replaceable>timeelement</replaceable>s separated by apersands | |||
(&).</para> | (&).</para> | |||
<para>Each <replaceable>timeelement</replaceable> is one of the | <para>Each <replaceable>timeelement</replaceable> is one of the | |||
following:</para> | following:</para> | |||
<variablelist> | <variablelist> | |||
<varlistentry> | <varlistentry> | |||
<term>timestart=<replaceable>hh</replaceable>:<replaceable>mm</replaceab le>[:<replaceable>ss</replaceable>]</term> | <term>timestart=<replaceable>hh</replaceable>:<replaceable>mm</replaceab le>[:<replaceable>ss</replaceable>]</term> | |||
<listitem> | <listitem> | |||
skipping to change at line 933 | skipping to change at line 933 | |||
<simplelist> | <simplelist> | |||
<member><command>echo 0 > | <member><command>echo 0 > | |||
/proc/net/nf_condition/switch1</command></member> | /proc/net/nf_condition/switch1</command></member> | |||
</simplelist> | </simplelist> | |||
<para>If you simply include the switch name in the SWITCH column, then the | <para>If you simply include the switch name in the SWITCH column, then the | |||
rule is enabled only when the switch is <emphasis | rule is enabled only when the switch is <emphasis | |||
role="bold">on</emphasis>. If you precede the switch name with ! (e.g., | role="bold">on</emphasis>. If you precede the switch name with ! (e.g., | |||
!switch1), then the rule is enabled only when the switch is <emphasis | !switch1), then the rule is enabled only when the switch is <emphasis | |||
role="bold">off</emphasis>. Switch settings are retained over | role="bold">off</emphasis>. Switch settings are retained over | |||
<command>shorewall restart</command>.</para> | <command>shorewall reload</command>.</para> | |||
<para>Shorewall requires that switch names:</para> | <para>Shorewall requires that switch names:</para> | |||
<itemizedlist> | <itemizedlist> | |||
<listitem> | <listitem> | |||
<para>begin with a letter and be composed of letters, digits, | <para>begin with a letter and be composed of letters, digits, | |||
underscore ('_') or hyphen ('-'); and</para> | underscore ('_') or hyphen ('-'); and</para> | |||
</listitem> | </listitem> | |||
<listitem> | <listitem> | |||
End of changes. 2 change blocks. | ||||
4 lines changed or deleted | 4 lines changed or added |