[1] Am I correct that _updown script is *modified* by somebody leaf/lrp
to accommodate ipchains, as opposed to the default ipfwadm?

Perhaps, that script should include some brief attribution of this
non-standard modification?  Is there some reason to modify this, as
opposed to using a custom script and [left|right]updown=, as recommended
by FreeS/WAN?

[2] Am I correct that there is *no* need to set DCD network.conf
settings:

        EXTERN_PORTS=
        EXTERN_PROTO[0..9]=

since _updown does this by itself?

[3] The only change required to network.conf is this?

        EXTERN_UDP_PORTS="network/mask_500"

What do you think?

-- 

Best Regards,

mds
mds resource
888.250.3987

Dare to fix things before they break . . .

Our capacity for understanding is inversely proportional to how much we
think we know.  The more I know, the more I know I don't know . . .

_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to