Shorewall users - Feb 2003 - GRE over IPSEC!

Hi!

I implemented host-to-host IPSec tunnel and over that GRE tunnel. One 
one host I have multiple addresses and on other just one, I want to 
setup my firewall so that everything is allowed trough that tunnel (from 
every address to every addess). My IPSec setup so far:
tunnels:
ipsec    net    ipsec0:193.77.x.x    vpn1
interfaces:
-    ipsec0
hosts:
vpn1    ipsec0:193.77.x.x
rules:
fw    vpn1    ACCEPT
vpn1    fw    ACCEPT
and similar on the other host. How can I configue rules for GRE tunnel?

Thanks, David

--On Wednesday, February 05, 2003 5:04 PM +0100 David Pristovnik 
<david.pristovnik@klivija.si> wrote:
> Hi!
>
> I implemented host-to-host IPSec tunnel and over that GRE tunnel. One one
> host I have multiple addresses and on other just one, I want to setup my
> firewall so that everything is allowed trough that tunnel (from every
> address to every addess). My IPSec setup so far: tunnels:
> ipsec    net    ipsec0:193.77.x.x    vpn1
> interfaces:
> -    ipsec0
> hosts:
> vpn1    ipsec0:193.77.x.x
> rules:
> fw    vpn1    ACCEPT
> vpn1    fw    ACCEPT
> and similar on the other host. How can I configue rules for GRE tunnel?
>
See http://www.shorewall.net/IPIP.htm -- that page describes both GRE and 
IPIP tunnels.

-Tom
--
Tom Eastep   \ Shorewall - iptables made easy
Shoreline,    \ http://www.shorewall.net
Washington USA \ teastep@shorewall.net