<!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
                 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd">
<!-- For license information see sanewall-manual-info.xml.in -->
<chapter><title>Troubleshooting</title>
  <para>a para</para>
  <section><title>Reading log output</title>
    <para>Is it logged?</para>
    <para>Not logged means matched a rule</para>
  </section>
  <section><title>Reading iptables</title>
    <para>content</para>
  </section>
  <section><title>Performance</title>
    <para>content</para>
    <section><title>Generation v.s. running</title>
      <para>content</para>
    </section>
    <section><title>Optimisation</title>
      <para>v.s. auditing</para>
      <para>1 chain per command</para>
      <para>no automated optimisation pass or avoidance of jumps</para>
      <para>manual optimisation wuth groups</para>
    </section>
    <section><title>Rules are created in order</title>
      <para>put more heavily used interfaces nearer top</para>
      <para>put more heavily used services nearer top of interfaces</para>
    </section>
    <section><title>Startup speed</title>
      <para>Processing phase - no changes in place yet</para>
      <para>Activation phase - limited firewall. Can take a few seconds.
            iptables-restore http://bugs.sanewall.org/sanewall/issues/11
            You can help!</para>
    </section>
  </section>
</chapter>
