> >>>> Where are you pinging from? > >> With what source IP address>?
> IPSEC doesn't depend on routing to direct the tunneled traffic. It > rather uses the Security Policy Database (SPD). You can see the contents > of the SPD in the 'shorewall dump' output. > > An SPD entry basically says "If a packet with a matching source address, > destination address, and protocol" is sent, then it should be handled in > a particular way. Which rises the question which IP ping uses as source IP if der is no -I option? In my case it's the IP of ppp0. Is this generally spoken the IP of the first local interface passed during ping? Axel -- Wir verwenden ausschließlich blaue Elektronen aus biologischem Anbau. ------------------------------------------------------------------------------ Android is increasing in popularity, but the open development platform that developers love is also attractive to malware creators. Download this white paper to learn more about secure code signing practices that can help keep Android apps secure. http://pubads.g.doubleclick.net/gampad/clk?id=65839951&iu=/4140/ostg.clktrk _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
