[Openswan Users] Problem with securing l2tpd (NETKEY 2.6)

[Gbenga]

Hello,

>Everything works fine, however my pain is l2tpd listening on all
>interfaces (public ones included). Both l2tpd and openswan are
>on the same physical server.

Include this in your /etc/xl2tpd/xl2tpd.conf file. That will make l2tp daemon listen on your internal ip. Make sure to restart your l2tpd service.

[global]
listen-addr = [internal ip]


>I've found that one way to secure it is to tag packets coming from
>the tunnel (esp) and then pass them in following chains.

Rgds,
Gbenga


      ___________________________________________________________
Yahoo! Answers - Got a question? Someone out there knows the answer. Try it
now.
http://uk.answers.yahoo.com/