Re: [LUG] Openswan and iptables

[Robin Cornelius <robin@xxxxxxxxxxxxxxxxxxxxx>]

Alex Charrett wrote:

> Aah OK - I think I get you, I'll have a go with that later on.
>
> > #MARK           SOURCE          DEST            PROTO   PORT(S) 
> > CLIENT  USER
> > 1:P             ppp0            0.0.0.0/0       ESP
> > 1:F             ppp0            0.0.0.0/0       ESP
> > 1                $FW             0.0.0.0/0       ALL
>
>
> That reminds me of another question that's occoured while playing with 
> openswan - why is running ppp necesessary now?  Again, before in the 
> pre 2.6 days my ipsec tunnel did everything I needed it to.  I'd 
> rather not have to complicate things by running ppp as well.


Its not, that example came from a system that used a ADSL modem via ppp0 
so that was the internet to me. You can still use raw ipsec its fine.

Robin


--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe. FAQ: www.dcglug.org.uk/linux_adm/list-faq.html