Attachment 16870 Details for Bug 30785 – patch-aa

patch-aa

patch-aa (text/plain), 1.63 KB, created by Giorgos Keramidas on 2001-09-24 12:20:00 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Giorgos Keramidas

Created: 2001-09-24 12:20:00 UTC

Size: 1.63 KB

patch

obsolete

>Index: article.sgml
>===================================================================
>RCS file: /home/ncvs/doc/en_US.ISO8859-1/articles/dialup-firewall/article.sgml,v
>retrieving revision 1.15
>diff -u -r1.15 article.sgml
>--- article.sgml	2 Sep 2001 10:37:26 -0000	1.15
>+++ article.sgml	24 Sep 2001 11:11:55 -0000
>@@ -94,7 +94,7 @@
>       </varlistentry>
>     </variablelist>
> 
>-    <para>There are some other OPTIONAL items that you can compile
>+    <para>There are some other <emphasis>optional</emphasis> items that you can compile
>      into the kernel for some added security.  These are not required in
>      order to get firewalling to work, but some more paranoid users may
>      want to use them.</para>
>@@ -107,7 +107,7 @@
> 	  <para>This option ignores TCP packets with SYN and FIN.  This
> 	   prevents tools such as nmap etc from identifying the TCP/IP
>  	   stack of the machine, but breaks support for RFC1644
>-	   extensions.  This is NOT recommended if the machine will be
>+	   extensions.  This is <emphasis>not</emphasis> recommended if the machine will be
> 	   running a web server.</para>
> 	</listitem>
>       </varlistentry>
>@@ -299,7 +299,7 @@
> 	    <emphasis>anything</emphasis> being diverted through the
> 	    <devicename>tun0</devicename> device. As far as it's
> 	    concerned incoming packets will speak only to the
>-	    dynamically assigned IP address and NOT to the internal
>+	    dynamically assigned IP address and <emphasis>not</emphasis> to the internal
> 	    network. Note though that you can add a rule like
> 	    <literal>$fwcmd add deny all from 192.168.0.4:255.255.0.0
> 	    to any via tun0</literal> which would limit a host on your

Actions: View

Attachments on bug 30785: 16870