Thanks

On 24/02/16 16:27, Tom Eastep wrote:
On 02/23/2016 08:38 PM, Subscribe wrote:
Thanks Tom,

Now have:

interfaces
----------------
###############################################################################
?FORMAT 2
###############################################################################
#ZONE    INTERFACE    OPTIONS
net    enp9s0        required,logmartians=1,routefilter,sourceroute=0
vpn    tun0
---------------

policy
--------------
#SOURCE        DEST        POLICY        LOG LEVEL    LIMIT:BURST
fw        net        ACCEPT
fw        vpn        ACCEPT
net        all        DROP        info
# The FOLLOWING POLICY MUST BE LAST
all        all        REJECT        info

Nothing vpn specific in rules.

This (now) doesn't drop/reject any vpn traffic (great), but is it correct?

Given the difficulty that you had resolving this issue, I think that
this is an appropriate configuration for you.

-Tom


------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140


_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to