search for: frerk

...1 Subnet is 157.125.132.0/23 #fre ipsec0:157.125.132.0/23 # VPN2 Gateway is 217.73.1.17 swe eth1:217.73.1.17 # VPN2 Subnet is 157.125.0.0/18 #swe ipsec0:157.125.0.0/18 Do I need entries for eth1 or ipsec0 (the commented ones)? Or something in between? Or should I merge the subnets into zone loc? Frerk > > Frerk Meyer > System Developer > --------------------------------------- > Framfab Deutschland AG > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@shorewall.net > http://mail.shorewall.net/mailman/listinfo/shorewall-u...

...keyingtries=0 pfs=no Currently I try exactly this, migrating from manuall configured iptables/ipsec to shorewall. Your experiences may help me. > I''m fairly new to the linux firewalling and ipsec etc so any > help would > be greatly appreciated. Hope this helps, Frerk Meyer System Developer --------------------------------------- Framfab Deutschland AG Roedingsmarkt 9 D 20459 Hamburg GERMANY <mailto:frerk.meyer@framfab.de> <http://www.framfab.de> Phone +49 (0)40 . 688 74 832 Fax +49 (0)40 . 688 74 999 --------------------------------------- official...

...are only examples of 1 static net2net VPN and 3 net2host VPNs. I need 2 static net2net VPNs. Do I need two zones vpn1 and vpn2? In which zone is ipsec0? It is really in both, and how do I declare that? May I configure the 2 gateway IPs of the VPNs or do I have to use 0.0.0.0 ? Thanks in advance, Frerk Meyer System Developer --------------------------------------- Framfab Deutschland AG

...re. Yes, that''s great. I tried myself and used the host file too. But I wasn''t bold enough to try it out since it wasn''t explicitly documented and some users here realy depend on it. Now I''ll try it and report, if I succeded with the description. Thanks again, Frerk Meyer