[Openswan Users] about eroute

[Paul Wouters]

On Wed, 12 Dec 2007, kelvin wrote:

>  ipsec eroute --add --eraf inet --src company.com/24 \
>           --dst mail.ngo.org/32 --transport-proto 6 \
>           --dst-port 110 --said tun.135 at mail.ngo.org
> " , does any other trffic bound for mail.ngo.org routed via this ipsec
> device will be droped?

Yes, set failureshunt=passthrough for allow that.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155