On Saturday 05 May 2007 01:20, Tom Eastep wrote: > Steven Jan Springl wrote: > > On Saturday 05 May 2007 01:04, Tom Eastep wrote: > >> Steven Jan Springl wrote: > >>> On Saturday 05 May 2007 00:05, Tom Eastep wrote: > >>>> Steven Jan Springl wrote: > >>>>> Tom > >>>>> > >>>>> Tunnels entry: > >>>>> > >>>>> openvpnserver:22 lan 192.168.0.253 lan > >>>>> > >>>>> when compiled with shorewall-shell generates: > >>>>> > >>>>> -A fw2lan -p udp -d 192.168.0.253 --sport 22 -j ACCEPT > >>>>> > >>>>> when compiled with shorewall-perl it generates: > >>>>> > >>>>> -A fw2lan -p 22 -d 192.168.0.253 --sport 1194 -j ACCEPT > >>>>> > >>>>> which produces error: > >>>>> > >>>>> iptables-restore v1.3.6: Unknown arg '--sport' > >>>> > >>>> I have fixed a similar bug in the other two openvpn types but > >>>> overlooked openvpn server. Fixed in 6242. > >>>> > >>>> Thanks, Steven > >>>> > >>>> -Tom > >>> > >>> Tom > >>> > >>> That works. > >>> > >>> However if the port is changed to 0: > >>> > >>> openvpnserver:0 lan 192.168.0.253 lan > >>> > >>> then it generates iptables rules: > >>> > >>> -A fw2lan -p udp -d 192.168.0.253 --dport 1194 -j ACCEPT > >>> -A lan2fw -p udp -s 192.168.0.253 --dport 1194 -j ACCEPT > >> > >> Please try revision 6243. > >> > >> Thanks, Steven > >> > >> -Tom > > > > Tom > > > > It is still generating the same iptables rules. > > 6244 is generating the proper (but completely silly) rules. > > Thanks, Steven > > -Tom
Tom I totally agree port 0 is silly. But I didn't like the idea of having port 1194 open when it hadn't been requested. Steven. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
