Hi,
i miss the ipsec interfaces on EFW 2.2RC3 (XEN paravirtualised kernel
2.6.21.7-2.neobiker.efw22xen). IPSEC establishes the tunnel, but according
to the firewall rules based on the ipsec+ interfaces the firewall blocks the
traffic.

As a first workaround (very quick hack) i inserted the following lines in
/etc/rc.d/rc.firewall.local to get the VPN-Traffic working again:
iptables -I INPUTFW -j ALLOW --match policy --dir in --pol ipsec 
iptables -I INPUTTRAFFIC -j INPUTFW --match policy --dir in --pol ipsec 
iptables -I VPNTRAFFIC -j VPNFW_LOGDROP --match policy --dir in --pol ipsec 
iptables -I VPNTRAFFIC -j VPNFW         --match policy --dir in --pol ipsec 

I wonder if this comes first with RC3? 
No one else missing the ipsec interfaces?

regards neobiker

-- 
View this message in context: 
http://www.nabble.com/IPSEC-Interfaces-missing-in-EFW-2.2RC3--tp20278320p20278320.html
Sent from the efw-user mailing list archive at Nabble.com.


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to