Fix longstanding Proxy ARP/IPSEC bug

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@1215 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2004-03-20 15:36:25 +00:00
parent 5f554b61dd
commit f37f1d4243
3 changed files with 6 additions and 1 deletions

View File

@ -13,3 +13,5 @@ Changes since 2.0.0
6) Fix another <zone>_frwd problem.
7) Add -x option to /sbin/shorewall.
8) Implement Sean Mathews's fix fix Proxy ARP and IPSEC.

View File

@ -1511,7 +1511,7 @@ setup_proxy_arp() {
[ -n "$persistent" ] && haveroute=yes
fi
run_arp -Ds $address $external pub
run_arp -i $external -Ds $address $external pub
echo 1 > /proc/sys/net/ipv4/conf/$interface/proxy_arp
echo 0 > /proc/sys/net/ipv4/conf/$external/proxy_arp

View File

@ -10,6 +10,9 @@ Problems Corrected since 2.0.0
/etc/shorewall/hosts, superfluous rules are generated in the
<zone>_frwd chain.
3) Thanks to Sean Mathews, a long-standing problem with Proxy ARP and
IPSEC has been corrected. Thanks Sean!!!
Problems Corrected since 2.0.1 Beta 1
1) The BOGON_LOG_LEVEL variable is now included in shorewall.conf. It