enabled firewall support

2006-09-18 07:41:54 +00:00
parent f9aa9e2977
commit 957115957a
36 changed files with 94 additions and 32 deletions
@@ -9,13 +9,14 @@ conn %default
 	keylife=20m
 	rekeymargin=3m
 	keyingtries=1
+	keyexchange=ikev2

 conn host-host
 	right=PH_IP_MOON
 	rightnexthop=%direct
 	rightcert=moonCert.pem
 	[email protected]
+	rightfirewall=yes
 	left=PH_IP_SUN
 	[email protected]
-	keyexchange=ikev2
 	auto=add
@@ -9,13 +9,14 @@ conn %default
 	keylife=20m
 	rekeymargin=3m
 	keyingtries=1
+	keyexchange=ikev2

 conn host-host
 	right=PH_IP_SUN
 	rightnexthop=%direct
 	rightcert=sunCert.pem
 	[email protected]
+	rightfirewall=yes
 	left=PH_IP_MOON
 	[email protected]
-	keyexchange=ikev2
 	auto=add
@@ -1,2 +1,6 @@
+moon::iptables -v -n -L
+sun::iptables -v -n -L
 moon::ipsec stop
 sun::ipsec stop
+moon::/etc/init.d/iptables stop 2> /dev/null
+sun::/etc/init.d/iptables stop 2> /dev/null
@@ -1,3 +1,5 @@
+moon::/etc/init.d/iptables start 2> /dev/null
+sun::/etc/init.d/iptables start 2> /dev/null
 moon::ipsec start
 sun::ipsec start
 moon::sleep 1