Diego Rivera wrote:
> I guess adding an attribute is an option - i.e. as long as we clearly
> document what it does and does not do, it might solve the problem for
> many users who can actually leverage them.
> 

It is actually a rather trivial change to detect the case where an IPSEC
zone is nested within an IP zone (ipv4 or ipv6) and set the option
automatically.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to