Tom Eastep wrote: > Mike Lander wrote: >> I just noticed this in the last dump in the conntrack table >> unknown 50 599 src=66.224.62.118 dst=65.203.186.182 packets=6613 >> bytes=740656 >> [UNREPLIED] src=65.203.186.182 dst=67.183.187.44 packets=0 bytes=0 mark=0 >> secmark=0 use=1 >> >> I am not sure what this means, but it looks like >> pings are going out eth0 66.224.62.182 coming back into eth1 67.183.187.44 > > Which address is specified as the local end of the IPSEC tunnel-mode SP?
Asked another way, can you show us your ipsec configuration? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
