From 9a2ee42f52002b54ee568a94bbd64d43010a5f3b Mon Sep 17 00:00:00 2001
From: Peter Simons <simons@cryp.to>
Date: Fri, 18 Mar 2016 12:00:39 +0100
Subject: Document the fact that the firewall allows pings by default in
 rl-1603.xml.

---
 nixos/doc/manual/release-notes/rl-1603.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'nixos/doc')

diff --git a/nixos/doc/manual/release-notes/rl-1603.xml b/nixos/doc/manual/release-notes/rl-1603.xml
index 83057a44d0ae..350025da7b00 100644
--- a/nixos/doc/manual/release-notes/rl-1603.xml
+++ b/nixos/doc/manual/release-notes/rl-1603.xml
@@ -262,6 +262,18 @@ services.syncthing = {
     </programlisting>
   </listitem>
 
+  <listitem>
+    <para>
+      <literal>networking.firewall.allowPing</literal> is now enabled by
+      default. Users are encourarged to configure an approiate rate limit for
+      their machines using the Kernel interface at
+      <filename>/proc/sys/net/ipv4/icmp_ratelimit</filename> and
+      <filename>/proc/sys/net/ipv6/icmp/ratelimit</filename> or using the
+      firewall itself, i.e. by setting the NixOS option
+      <literal>networking.firewall.pingLimit</literal>.
+    </para>
+  </listitem>
+
 </itemizedlist>
 
 
-- 
cgit 1.4.1