[Openswan Users] l2tp firewall kernel 26

sasa sasa at shoponweb.it
Tue Jun 28 17:28:20 CEST 2005


"Brett Curtis" wrote:

># External Input VPN Access
>$IPT -N external-vpn-traffic
>$IPT -F external-vpn-traffic
>$IPT -A external-vpn-traffic -i $EXTIF -m mark --mark 1 -j ACCEPT
>$IPT -A external-vpn-traffic -d $EXTIP -p udp -m udp --dport 500 \
>  -j ACCEPT
>$IPT -A external-vpn-traffic -p esp -j ACCEPT

I think that EXTIP is the pubblic IP on eth0 (public interface on fw/vpn bix) but what's the EXTIF ??
still thanks.

        Salvatore.



More information about the Users mailing list