"Fossies" - the Fresh Open Source Software Archive  

Source code changes of the file "ipsets.xml" between
shorewall-docs-xml-5.2.7.tar.bz2 and shorewall-docs-xml-5.2.8.tar.bz2

About: Shorewall (The Shoreline Firewall) is an iptables based firewall (documentation; XML)

ipsets.xml  (shorewall-docs-xml-5.2.7.tar.bz2):ipsets.xml  (shorewall-docs-xml-5.2.8.tar.bz2)
skipping to change at line 148 skipping to change at line 148
file and when the ipset appears in the SOURCE column of the rules file, file and when the ipset appears in the SOURCE column of the rules file,
<emphasis role="bold">src</emphasis> is assumed. If the ipset appears in <emphasis role="bold">src</emphasis> is assumed. If the ipset appears in
the DEST column of the rules file, <emphasis role="bold">dst</emphasis> is the DEST column of the rules file, <emphasis role="bold">dst</emphasis> is
assumed. Note that by using <emphasis role="bold">[dst]</emphasis> in the assumed. Note that by using <emphasis role="bold">[dst]</emphasis> in the
blacklist file, you can coerce the rule into matching the destination IP blacklist file, you can coerce the rule into matching the destination IP
address rather than the source.</para> address rather than the source.</para>
<para>Beginning with Shorewall 4.4.14, multiple source or destination <para>Beginning with Shorewall 4.4.14, multiple source or destination
matches may be specified by placing multiple set names in '+[...]' (e.g., matches may be specified by placing multiple set names in '+[...]' (e.g.,
+[myset,myotherset]). When so enclosed, the set names need not be prefixed +[myset,myotherset]). When so enclosed, the set names need not be prefixed
with a plus sign.</para> with a plus sign. When such a list of sets is specified, matching packets
must match all of the listed sets.</para>
<para>Shorewall can save/restore your ipset contents with certain <para>Shorewall can save/restore your ipset contents with certain
restrictions:</para> restrictions:</para>
<orderedlist> <orderedlist>
<listitem> <listitem>
<para>You must set SAVE_IPSETS=Yes in <ulink <para>You must set SAVE_IPSETS=Yes in <ulink
url="manpages/shorewall.conf.html">shorewall.conf</ulink> (5).</para> url="manpages/shorewall.conf.html">shorewall.conf</ulink> (5).</para>
</listitem> </listitem>
 End of changes. 1 change blocks. 
1 lines changed or deleted 2 lines changed or added

Home  |  About  |  Features  |  All  |  Newest  |  Dox  |  Diffs  |  RSS Feeds  |  Screenshots  |  Comments  |  Imprint  |  Privacy  |  HTTP(S)