mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-23 06:38:53 +01:00
Tone down ipsecnat rules a bit
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@294 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
2c41dc5154
commit
912681428b
@ -1150,21 +1150,17 @@ setup_tunnels() # $1 = name of tunnels file
|
||||
run_iptables -A $inchain -p 51 -s $1 -j ACCEPT
|
||||
run_iptables -A $outchain -p 51 -d $1 -j ACCEPT
|
||||
|
||||
run_iptables -A $outchain -p udp -d $1 --dport 500 --sport 500 $options
|
||||
|
||||
if [ $2 = ipsec ]; then
|
||||
run_iptables -A $inchain -p udp -s $1 --sport 500 --dport 500 $options
|
||||
run_iptables -A $outchain -p udp -d $1 --dport 500 --sport 500 $options
|
||||
else
|
||||
run_iptables -A $inchain -p udp -s $1 --dport 500 $options
|
||||
run_iptables -A $outchain -p udp -d $1 --sport 500 $options
|
||||
fi
|
||||
|
||||
for z in `separate_list $3`; do
|
||||
if validate_zone $z; then
|
||||
if [ $2 = ipsec ]; then
|
||||
addrule ${FW}2${z} -p udp --sport 500 --dport 500 $options
|
||||
else
|
||||
addrule ${FW}2${z} -p udp --sport 500 $options
|
||||
fi
|
||||
else
|
||||
error_message "Warning: Invalid gateway zone ($z)" \
|
||||
" -- Tunnel \"$tunnel\" may encounter keying problems"
|
||||
|
Loading…
Reference in New Issue
Block a user