Tom Eastep wrote: > Antony Gelberg wrote: >> This used to work with Linux 2.4. Can anybody assist? I suspect it is >> to do with policy matching but I don't really know enough about the >> detail to know where to go from here. I have put a dump at >> http://www.wayforth.co.uk/Members/antony/shorewall_dump/. > > You appear to be doing IPIP encapsulation within the IPSEC SA. So you need > to define the IPIP tunnel as well. > > /etc/shorewall/tunnels: > > #TYPE ZONE GATEWAY > ipip vpn 82.68.107.174 >
Great, thank you! Just for my knowledge, how did you know that? We've been using openswan like this for years and I've never even heard of IPIP. Antony ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
