[Openswan Users] Listen only on one interface

Fridtjof Busse fbusse at gmx.de
Fri Dec 21 10:41:11 EST 2007


* "Peter McGill" <petermcgill at goco.net>:
> You should be able to block it with your iptables rules.
> Ie)
> 
> iptables -t filter -A INPUT -i eth0 -p udp --dport 500 -j ACCEPT
> iptables -t filter -A INPUT -p udp --dport 500 -j REJECT # or DROP

Sure, but I'd prefer to make the service not listen rather than block it
via iptables.

-- 
Fridtjof Busse


More information about the Users mailing list