Tobias Brunner
bb66b4d56b
Don't make clients wait for the TCP connections to timeout by dropping packets. By rejecting them the OCSP requests fail immediately.
6 lines
183 B
Plaintext
6 lines
183 B
Plaintext
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
|
|
moon::ipsec start
|
|
carol::ipsec start
|
|
carol::expect-connection home
|
|
carol::ipsec up home
|