Tobias Brunner
f519acd42f
By consistently using the `expect-connection` helper we can avoid pretty much all previously needed calls to sleep.
11 lines
351 B
Plaintext
11 lines
351 B
Plaintext
carol::iptables-restore < /etc/iptables.rules
|
|
carol::ipsec start
|
|
dave::ipsec start
|
|
moon::ipsec start
|
|
carol::expect-connection moon
|
|
carol::ipsec up moon
|
|
carol::iptables -D INPUT -i eth0 -p udp --dport 500 --sport 500 -j ACCEPT
|
|
carol::iptables -D OUTPUT -o eth0 -p udp --dport 500 --sport 500 -j ACCEPT
|
|
dave::expect-connection moon
|
|
dave::ipsec up moon
|