[Openswan Users] about eroute

Paul Wouters paul at xelerance.com
Wed Dec 12 10:02:30 EST 2007

On Wed, 12 Dec 2007, kelvin wrote:

>  ipsec eroute --add --eraf inet --src company.com/24 \
>           --dst mail.ngo.org/32 --transport-proto 6 \
>           --dst-port 110 --said tun.135 at mail.ngo.org
> " , does any other trffic bound for mail.ngo.org routed via this ipsec
> device will be droped?

Yes, set failureshunt=passthrough for allow that.

Building and integrating Virtual Private Networks with Openswan:

More information about the Users mailing list