On Wed, 2011-07-27 at 21:51 -1000, Das wrote: > Sorry getting lost now, been at this with other Slackware users, soHi > Tom, > > I've gotten quite spun around with this for the past few weeks. > > Let me ask this over, or another way, if I did before and sorry if I'm > repeating myself. I only use OpenVPN as a client connecting to a VPN > service, so will the 3 files below as you see them work after I've > connect to OpenVPN? Because when I showed this to another Slackware > user that seemed quite experienced with iptables and I showed him the > output of iptables-save, he could not see anything wrong with the 3 > files below not working for me. > > So the 3 files below work for me when I'm connected to OpenVPN, of > course when I need to connect to the VPN, I have to comment the first > line in the Policy and uncomment the second line, so how you see it > now, this is after I've connected and I've restarted shorewall... > > So for me I do not need a host, tunnels or rules to make the > connection work....
Of course you don't - you could even: - shorewall clear - /etc/init.d/openvpn start - shorewall start But why? Why not set up the Shorewall configuration so that you don't have to fiddle with the policies if your current init scripts happen to start OpenVPN after they start Shorewall, or if you need to restart OpenVPN? -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ Got Input? Slashdot Needs You. Take our quick survey online. Come on, we don't ask for help often. Plus, you'll get a chance to win $100 to spend on ThinkGeek. http://p.sf.net/sfu/slashdot-survey
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
