search for: tun11

Hi, I got an existing solution with shorewall where I can differentiate tun10 from tun+ as different zone. For example: /etc/shorewall/zones A ipv4 B:A ipv4 /etc/shorewall/interfaces A tun+ B tun10 Now, I have a requirement to add tun11 to zone B. When I do this in interfaces config: A tun+ B tun10,tun11 It doesn''t like it (although it''s ok when performing shorewall check). If the above isn''t possible, is there an issue of running zone B with tap interfaces? Is it going to break my existing routin...

...ashed very nastily when closing openvpn. We could see this even when manually stopping the domUs. We surmised that the problem was we had tun0 and tun1 defined in both domains and killing them in one must be killing them in another. We renamed those tun adapters in the second domain to tun10 and tun11 and that problem went away. We still noticed very long reboot times. The hang seemed to be at killall but the "logjam" seemed to break after xendomains errored out. We assumed this was because killall killed something that xendomains needed to shutdown gracefully so we added explicit K...