On Saturday 05 May 2007 00:05, Tom Eastep wrote:
> Steven Jan Springl wrote:
> > Tom
> >
> > Tunnels entry:
> >
> > openvpnserver:22  lan  192.168.0.253  lan
> >
> > when compiled with shorewall-shell generates:
> >
> > -A fw2lan -p udp -d 192.168.0.253 --sport 22 -j ACCEPT
> >
> > when compiled with shorewall-perl it generates:
> >
> > -A fw2lan -p 22 -d 192.168.0.253 --sport 1194 -j ACCEPT
> >
> > which produces error:
> >
> > iptables-restore v1.3.6: Unknown arg '--sport'
>
> I have fixed a similar bug in the other two openvpn types but overlooked
> openvpn server. Fixed in 6242.
>
> Thanks, Steven
>
> -Tom
Tom

That works.

However if the port is changed to 0:

openvpnserver:0  lan  192.168.0.253  lan

then it generates iptables rules:

-A fw2lan -p udp -d 192.168.0.253 --dport 1194 -j ACCEPT
-A lan2fw -p udp -s 192.168.0.253 --dport 1194 -j ACCEPT

Steven.

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to