| 1 | config FWRT_PACKAGE_SHOREWALL
|
|---|
| 2 | prompt "shorewall......................... high-level netfilter configuration tool"
|
|---|
| 3 | tristate
|
|---|
| 4 | select FWRT_PACKAGE_IPTABLES
|
|---|
| 5 | select FWRT_PACKAGE_IPTABLES_MOD_EXTRA
|
|---|
| 6 | default n
|
|---|
| 7 | help
|
|---|
| 8 | The Shoreline Firewall, more commonly known as "Shorewall", is a
|
|---|
| 9 | high-level tool for configuring Netfilter. You describe your
|
|---|
| 10 | firewall/gateway requirements using entries in a set of configuration
|
|---|
| 11 | files. Shorewall reads those configuration files and with the help
|
|---|
| 12 | of the iptables utility, Shorewall configures Netfilter to match
|
|---|
| 13 | your requirements.
|
|---|
| 14 |
|
|---|
| 15 | http://www.shorewall.net/
|
|---|
| 16 |
|
|---|
| 17 | config FWRT_PACKAGE_SHOREWALL_STRIPCONF
|
|---|
| 18 | prompt " Strip shorewall configuration files"
|
|---|
| 19 | bool
|
|---|
| 20 | default n
|
|---|
| 21 | depends FWRT_PACKAGE_SHOREWALL
|
|---|
| 22 | help
|
|---|
| 23 | To save space, all shorewall files in /etc/shorewall will get striped.
|
|---|
| 24 | This means that all comments, empty lines etc. are removed.
|
|---|
| 25 |
|
|---|
| 26 | By default this option is not enabled, because the comments
|
|---|
| 27 | in the configfiles helps the user a lot to configure shorewall.
|
|---|
| 28 |
|
|---|
| 29 | config FWRT_PACKAGE_SHOREWALL_STRIPSHARED
|
|---|
| 30 | prompt " Strip shared shorewall files (macros & actions mainly)"
|
|---|
| 31 | bool
|
|---|
| 32 | default y
|
|---|
| 33 | depends FWRT_PACKAGE_SHOREWALL
|
|---|
| 34 | help
|
|---|
| 35 | To save space, all shared shorewall files in /usr/share/shorewall
|
|---|
| 36 | will get striped. This means that all comments, empty lines etc.
|
|---|
| 37 | are removed.
|
|---|
| 38 |
|
|---|
| 39 | By default this option is enabled, because for normal usage the user
|
|---|
| 40 | doesn't need to change files in /usr/share/shorewall. Comments in all
|
|---|
| 41 | shared files just would waste disk space on most embedded devices.
|
|---|
