-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 11/28/2016 09:07 AM, Tom Eastep wrote:

> 
> 
> Do you have nested tunnels here? Normally, ESP packets would not 
> themselves require 'pol ipsec'.
> 

It would probably be most useful if you would forward to me personally
the output of 'shorewall dump'. That way, I can see both your
Shorewall and IPSEC configurations.

Thanks,
- -Tom
- -- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org

iQIcBAEBCAAGBQJYPHU0AAoJEJbms/JCOk0QwzMP/iTS6e41E+Hv0Q5DbxaoWwOc
Pra2Ovfw11brW3omlZBBXITpHETnxAKKDvLJCbP59kAoGTa7LdonCDqTRQpEhP7A
wbQsMQ+xMI4p7JDtydB7JgdiDtKVRiNCil2bmB92IpgcOeRDKZ/mgmyIFUsxg6iO
mVP4RcB7kFqvzNU8Ysz8M2srMuElwNPzbBvdyEPnwrPTcycffN21W6l3w1bsml5q
EsPAuTMlmxcZsV3Ki0HDXRBhKSkpCskqVgZXedm4wFlWye6F0edvH/5BGNtPOSsd
EixlASv+yVMM2JulgRJ0/WJbqLTrXTVS4XOxcM7r/eJnAFotqriYV2CjYOWt4iOk
qKFO9JB6R6ovwRiE2xhNT6l75OK+TZbMlywzDPkFly9X/T1X5RKWiYeDCmW/xbwK
cuByj7zoI7lKDgqe9GmoJ7RW5/Gicoo9XkogStX0lKI5chYmKsX3GE274UIakcGM
mi+jMaXcOkKb+JMydw6zLSJKcruS72zmZe8re/6W3HEDGGUzMltU/bJZwUNH4tii
mFgbxXy8UxuqubpjtbjsGmOSGZLby8Gjgcu1m0z3Wpgx50iOUXxSXGS1saRroLEu
/5Sd6aiDm57nXdgsxXv3slLdkfdiJTnEUIF2XluGeNhtHTZNXKWeieHD0/bv6DIs
vT+hCu1PUb4MU2HJ8tI2
=0Pwt
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to