Tobias Brunner
f519acd42f
By consistently using the `expect-connection` helper we can avoid pretty much all previously needed calls to sleep.
13 lines
383 B
Plaintext
13 lines
383 B
Plaintext
carol::iptables-restore < /etc/iptables.rules
|
|
carol::ipsec start
|
|
dave::ipsec start
|
|
moon::ipsec start
|
|
moon::expect-connection carol
|
|
moon::ipsec up carol
|
|
moon::sleep 0.5
|
|
carol::iptables -D INPUT -i eth0 -p udp --dport 500 --sport 500 -j ACCEPT
|
|
carol::iptables -D OUTPUT -o eth0 -p udp --dport 500 --sport 500 -j ACCEPT
|
|
dave::expect-connection moon
|
|
dave::ipsec up moon
|
|
moon::sleep 0.5
|