denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use iptables-restore in all ikev2 firewall scenarios

Browse Source
This commit is contained in:
Andreas Steffen
2013-01-17 16:55:00 +01:00
committed by Tobias Brunner
parent 28b7db2b3c
commit d815235d17
245 changed files with 1374 additions and 2743 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/net2net-psk-dscp/posttest.dat
+2 -2
View File
@@ -1,7 +1,7 @@
moon::ipsec stop
sun::ipsec stop
moon::/etc/init.d/iptables stop 2> /dev/null
sun::/etc/init.d/iptables stop 2> /dev/null
moon::iptables-restore < /etc/iptables.flush
sun::iptables-restore < /etc/iptables.flush
alice::iptables -t mangle -F OUTPUT
venus::iptables -t mangle -F OUTPUT
bob::iptables -t mangle -F OUTPUT
testing/tests/ikev2/net2net-psk-dscp/pretest.dat
+2 -2
View File
@@ -1,7 +1,7 @@
moon::rm /etc/ipsec.d/cacerts/*
sun::rm /etc/ipsec.d/cacerts/*
moon::/etc/init.d/iptables start 2> /dev/null
sun::/etc/init.d/iptables start 2> /dev/null
moon::iptables-restore < /etc/iptables.rules
sun::iptables-restore < /etc/iptables.rules
alice::iptables -t mangle -A OUTPUT -p icmp -j DSCP --set-dscp-class BE
venus::iptables -t mangle -A OUTPUT -p icmp -j DSCP --set-dscp-class EF
moon::iptables -t mangle -A PREROUTING -m dscp --dscp-class BE -j MARK --set-mark 10