[Openswan Users] Listen only on one interface
Fridtjof Busse
fbusse at gmx.de
Fri Dec 21 10:41:11 EST 2007
* "Peter McGill" <petermcgill at goco.net>:
> You should be able to block it with your iptables rules.
> Ie)
>
> iptables -t filter -A INPUT -i eth0 -p udp --dport 500 -j ACCEPT
> iptables -t filter -A INPUT -p udp --dport 500 -j REJECT # or DROP
Sure, but I'd prefer to make the service not listen rather than block it
via iptables.
--
Fridtjof Busse
More information about the Users
mailing list