[Shorewall-users] Opportunistic encryption

Homer Parker
Wed, 30 Oct 2002 16:35:33 -0000

--zz.qs=.Abtn=:eMA
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

On Wed, 30 Oct 2002 06:21:35 -0800 Tom Eastep <teastep@shorewall.net>
wrote....


> To eliminate the above messages, you could simply add a static rule such
> as:
>
> ACCEPT	fw	vpn	udp	53
>
> Where ''vpn'' is the zone used for the remote
client/network.

	That fixed that error.... Brought in a whole slew of new ones ;) These
are from klips, so I''ll chase them through FreeS/WAN first ;) But, I
did
come up with a couple I don''t remember seeing before:

Oct 30 10:36:45 linux kernel: Shorewall:all2all:REJECT:IN= OUT=eth1
SRC=64.216.105.3 DST=128.63.2.52 LEN=52 TOS=0x00 PREC=0x00 TTL=255
ID=13040 PROTO=ICMP TYPE=0 CODE=0 ID=43520 SEQ=24
Oct 30 10:36:48 linux kernel: NET: 12 messages suppressed.
Oct 30 10:36:48 linux kernel: klips_error:ipsec_tunnel_start_xmit:
ip_send() failed, err=1
Oct 30 10:36:48 linux kernel: Shorewall:all2all:REJECT:IN= OUT=eth1
SRC=64.216.105.3 DST=128.63.2.52 LEN=52 TOS=0x00 PREC=0x00 TTL=255
ID=13041 PROTO=ICMP TYPE=0 CODE=0 ID=43520 SEQ=24

	Looks to me like pings to see if the root servers are alive?

---
Homer Parker

http://www.homershut.net
telnet://bbs.homershut.net

This e-mail message is 100% Microsoft free!

WARNING: THIS ACCOUNT BELONGS TO A RABID
ANTI-SPAMMER NET-NAZI DOT-COMMUNIST.

   /"\
   \ /     ASCII Ribbon Campaign
    X      Against HTML Mail
   / \

--zz.qs=.Abtn=:eMA
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9wApergrN227HZ+8RAtsUAJ4uejVCNj2C34ZjGxLwg5juHkd7BACgv50b
l9o4lx8F/qxlxmv/k8taazk=uIlx
-----END PGP SIGNATURE-----

--zz.qs=.Abtn=:eMA--