[Openswan Users] anything wrong with these iptables?
paul at xelerance.com
Thu Jul 15 13:16:52 EDT 2010
On Thu, 15 Jul 2010, Ryan McLeod wrote:
> I'm having some minor problems when a vpn re-establishes after one of the vpn devices are rebooted. It's an ASA to openswan setup. I just
> want to know if these iptable settings are proper.
> $IPTABLES -A INPUT -p udp --dport 500 -j ACCEPT
> $IPTABLES -A OUTPUT -p udp --dport 500 -j ACCEPT
> $IPTABLES -A INPUT -p udp --dport 4500 -j ACCEPT
> $IPTABLES -A OUTPUT -p udp --dport 4500 -j ACCEPT
This is not complete. the 4500 connection usually comes in from a random high port
$IPTABLES -A OUTPUT -p udp --sport 4500 -j ACCEPT
More information about the Users