Mike wrote:

> Tom
>       Following your logic above would be:
> 2:11       $FW                eth0                    udp     1194
> 3:11       $FW                tun1                    udp     1194

> tun1 is the third interface listed in tcdevices

Mike,

Please don't post your reply below the "--". Most mailers delete that part
of the post when replying.

Your rule for tun1 is silly; no udp 1194 traffic will go THROUGH the tunnel.
That protocol/port is used to carry the tunneled traffic itself.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to