Hi

----------------------------------------------------------------------------
--------------
Tom write:

a) In the current development release (3.3.6), if you don't define any
'ipsec' zones or host entries

>>>>>>>>>>>>>>>>>>>>>>>with "ipsec zone" checked
!?<<<<<<<<<<<<<<<<<<<<<<<<<<

then Shorewall will not use policy match. So with that
version, you can use the http://www.shorewall.net/IPSEC.html instructions
even if you have policy match support.

b) You can disable policy match by renaming the iptables policy match
module.
The iptables modules are usually found in /lib/iptables/ or
/usr/lib/iptables/.
You can simply rename the libipt_policy.so file to libipt_foo.so.
----------------------------------------------------------------------------
-------

I thought that I had the choice between IPSEC.html and IPSEC-2.6.html !!!!
but no

Ok, i have tried your proposal b) and it's all functionnal.

You're really effective

Thanks

VUILLET Damien



----- Original Message ----- 
From: "Tom Eastep" <[EMAIL PROTECTED]>
To: "Shorewall Users" <[email protected]>
Sent: Monday, December 18, 2006 7:22 PM
Subject: Re: [Shorewall-users] shorewall + ipsec openswan


> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share
your
> opinions on IT & business topics through brief surveys - and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV


----------------------------------------------------------------------------
----


> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to