commit 64da024c7a06908574b9782f7e4fe505418194dc
Author: John J. McDonough <jjmcd(a)fedoraproject.org>
Date: Wed Mar 21 15:53:27 2012 -0400
Add admonition about iptables
en-US/Security.xml | 31 ++++++++++++++++++++-----------
1 files changed, 20 insertions(+), 11 deletions(-)
---
diff --git a/en-US/Security.xml b/en-US/Security.xml
index 4357010..32656fb 100644
--- a/en-US/Security.xml
+++ b/en-US/Security.xml
@@ -66,19 +66,28 @@
of the answer.
</para>
<para>
- The <application>iptables</application> and
- <application>ip6tables</application> services will not be enabled
- by default anymore. The required changes in the init scripts are
- simple. system-config-firewall will not be installed by default
- anymore, but <application>firewalld</application> with the user land
tools will be installed
- by default. The needed changes in comps are simple.
+ <important>
+ <title>iptables will no longer be enabled by default</title>
+ <para>
+ The <application>iptables</application> and
+ <application>ip6tables</application> services will not be
+ enabled by default anymore. The required changes in the
+ init scripts are
+ simple. <application>system-config-firewall</application>
+ will not be installed by default anymore, but
+ <application>firewalld</application> with the user land
+ tools will be installed by default. The needed changes in
+ comps are simple.
+ </para>
+ </important>
</para>
<para>
- Services which are adding firewall rules directly with iptables
- commands need to be changed to benefit from
<application>firewalld</application>.
- These are: libvirtd, <application>NetworkManager</application>,
- <application>system-config-printer</application>,
- <application>gnome printer settings</application>.
+ Services which are adding firewall rules directly with
+ iptables commands need to be changed to benefit from
+ <application>firewalld</application>. These are: libvirtd,
+ <application>NetworkManager</application>,
+ <application>system-config-printer</application>,
+ <application>gnome printer settings</application>.
</para>
<para>
An explicit transition is planned after Fedora 18 with dropping
Show replies by date