Tom Eastep <[EMAIL PROTECTED]> writes:

> On Thu, 2007-03-22 at 19:08 -0300, Bruce S. Skinner wrote:
>
>> 
>> To get a successful IKE on port 4500 I replaced the above snippet
>> with:
>> 
>>   if [ $kind = ipsec ]; then
>>     run_iptables -A $outchain -p udp $(dest_ip_range $1) --dport 500 $options
>>     run_iptables -A $inchain  -p udp $(source_ip_range $1) --dport 500 
>> $options
>>   else
>>     run_iptables -A $outchain  -p udp $(source_ip_range $1) --dport 500 
>> $options
>>     run_iptables -A $outchain  -p udp $(source_ip_range $1) --dport 4500 
>> $options
>
> The above rule should read:
>
> run_iptables -A $outchain  -p udp $(dest_ip_range $1) --dport 4500
> $options
>
>>     run_iptables -A $inchain  -p udp $(source_ip_range $1) --dport 500 
>> $options
>>     run_iptables -A $inchain  -p udp $(source_ip_range $1) --dport 4500 
>> $options
>>   fi
>> 
>> Is this reasonable or am I way out in left field?
>
> Except for the incorrect range selection, it looks correct.

Oops, my typo in the email.

>
> Thanks,
> -Tom
> -- 
> Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
> Shoreline,     \ http://shorewall.net
> Washington USA  \ [EMAIL PROTECTED]
> PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV_______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users

-- 

Norstead Farm - Bruce & Carole Skinner
RR#1 Waterville NS Canada B0P 1V0
 Tel: 902-538-1765
Cell: 902-670-6456
 Fax: 902-538-1794
<mailto:[EMAIL PROTECTED]>

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to