Hi Massimo,
mdenadal wrote:
>
> Nope, I'm adding the missing modules right now (and upgrading kernel to
> 2.6.29-xs5.5.0.17).
> After that if you want to try the virtual appliance I can send you a
> private link.
>
> But, anybody knows if it's legit to distribute an Endian based virtual
> appliance ?
>
> Massimo.
>
> p.s.
> Anyway Endian 2.4 seems very buggy to me. Maybe I'll build a 2.3.1 virtual
> appliance too.
>
so you're using not the EFW Kernel? What are the sources you're using for
compiling the missing Modules for openswan/IPSEC?
I switched from IPSEC to openssl, but ipsec is working with kernel-standard
if you insert following rule's e.g. in /etc/rc.local (EFW 2.3):
for type in 8 30; do
iptables -I INPUTFW -j ALLOW -p icmp -i eth3 --icmp-type $type
--match policy --dir in --pol ipsec
#iptables -I INPUTFW -j ALLOW -p icmp -i eth3 --icmp-type $type
--match policy --dir out --pol ipsec
done
for port in 8080 8110 2121; do
iptables -I INPUTFW -j ALLOW -p tcp -i eth3 --dport $port -m
policy --dir in --pol ipsec
#iptables -I INPUTFW -j ALLOW -p tcp -i eth3 --dport $port -m
policy --dir out --pol ipsec
done
for port in 53 67 123; do
iptables -I INPUTFW -j ALLOW -p udp -i eth3 --dport $port -m
policy --dir in --pol ipsec
iptables -I INPUTFW -j ALLOW -p tcp -i eth3 --dport $port -m
policy --dir in --pol ipsec
done
BTW, do you think, EFW 2.3.1 Community is less buggy than 2.4? Some users
remain at EFW 2.2 because of lot's of bugs in Community Versions with
missing bugfixes in Community Versions in the past... :-(
BR neobiker
--
View this message in context:
http://old.nabble.com/Xen-support-for-2.3-tp26556692p28833312.html
Sent from the efw-user mailing list archive at Nabble.com.
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
lucky parental unit. See the prize list and enter to win:
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user