Re: IPsec flow portrange problem

Hi, thanks for your answer. Markus Friedl schrieb: AFAIK it's not supported in IKE, so it's not supported in ipsec.conf Something like "port { 1000 1001 ... }" would be nice too, but also doesn't seem to work. It works for "from/to { IP1 IP2 ... }" though. At least I did not manage to set i

Re: IPsec flow portrange problem

AFAIK it's not supported in IKE, so it's not supported in ipsec.conf On Thu, Sep 04, 2008 at 10:37:25AM +0200, Michael wrote: > Hi, > > I am trying to setup IPsec and also exclude some parts from getting > processed by IPsec. > > In IPSEC.CONF(5) the description says > > [...] > from src [port

IPsec flow portrange problem

Hi, I am trying to setup IPsec and also exclude some parts from getting processed by IPsec. In IPSEC.CONF(5) the description says [...] from src [port sport] to dst [port dport] [...] The optional port modifiers restrict the flows to the specified ports [...] It is possible to supply multipl