Re: [leaf-user] Problem with home firewall.

2007-10-20 Thread Tony
I agree, shouldn't the comments be on a line by themselves with a # in front? I always separate anything I add by making it really obvious i.e.: # for office ACCEPT net loc:192.168.10.0 255.255.255.0 udp 500 # Tony

Re: [leaf-user] Problem with home firewall.

2007-10-20 Thread Erich Titl
Hi Rick Tibbs, Richard wrote: > > ACCEPT netloc:192.168.10.0 255.255.255.0 udp 500 // for office > firewall > ACCEPT netloc:192.168.10.0 255.255.255.0 udp 4500 > ACCEPT netloc:192.168.10.0 255.255.255.0 net 50 > ACCEPT netloc:192.168.10.0 255.255.255.0 net 51 > ACCEPT loc:192.168.

[leaf-user] Problem with home firewall.

2007-10-19 Thread Tibbs, Richard
Hi list. In the "old days (Bering 1.2)" the following lines would work for access to ipsec in etc/shorewall/rules: ACCEPT net loc:192.168.10.0 255.255.255.0 udp 500 // for office firewall ACCEPT net loc:192.168.10.0 255.255.255.0 udp 4500 ACCEPT net loc:192.168.10.0 255.255.255.0