Re: [strongSwan] Configurable core dump path?

2015-04-21 Thread Bryan Duff
What distro are you using? Did you see how Ubuntu does it? Piping the output to apport. You can pipe the core file to a script that does whatever with it. -Bryan On Tue, Apr 21, 2015 at 8:47 AM, Ruel, Ryan rr...@akamai.com wrote: That is useful. It seems to affect all cores, however.

Re: [strongSwan] IPTables NAT Query

2015-04-06 Thread Bryan Duff
If I recall correctly your step 5 is where things matter - make sure at that point (basically after nat POSTROUTING) that the traffic source/dest matches your left/rightsubnets. Don't worry about the routing decision (your step 3). You should only need one DNAT and one SNAT for your traffic.

Re: [strongSwan] issue with firewall rules

2015-04-01 Thread Bryan Duff
Use the iptables --wait argument? From the manpage: Wait for the xtables lock. To prevent multiple instances of the program from running concurrently, an attempt will be made to obtain an exclusive lock at launch. By default, the program will exit if the lock cannot be obtained. This option