docs: fix incorrect info about routed networks

In a recent expansion of the documentation on network forward modes, I
incorrectly stated that incoming sessions to guests on routed networks
were blocked. This is true for guests on NATed networks, but not
routed. This patch corrects that error, and adds a pointer to the
nwfilter page for those who do want to restrict incoming sessions to
hosts on routed networks.
This commit is contained in:
Laine Stump 2011-10-20 15:26:30 -04:00
parent 755a09b579
commit 52e3b3d1bb

View File

@ -134,12 +134,12 @@
attribute is set, firewall rules will restrict forwarding attribute is set, firewall rules will restrict forwarding
to the named device only. This presumes that the local LAN to the named device only. This presumes that the local LAN
router has suitable routing table entries to return router has suitable routing table entries to return
traffic to this host. Firewall rules are also installed traffic to this host. All incoming and outgoing sessions
that prevent incoming sessions from the physical network to guest on these networks are unrestricted. (To restrict
to the guests, but outgoing sessions are unrestricted (as incoming traffic to a guest on a routed network, you can
are sessions from the host to the guests, and between configure <a href="formatnwfilter.html">nwfilter rules</a>
guests on the same network.)<span class="since">Since on the guest's interfaces.)
0.4.2</span> <span class="since">Since 0.4.2</span>
</dd> </dd>
<dt><code>bridge</code></dt> <dt><code>bridge</code></dt>