Shorewall users - Jul 2011 - source ip of open vpn

I am listening all that talk about vpn, and a question come in my mind :

I have some systems working with openvpn in bridge mode, everything ok .

But I will need to add more connections, some fixed and some from notebooks
with no fixed place, mobile ones ...

So, I will not have static ips to suply to /etc/shorewall/tunnels file, I
can use any in the place of the ip in this :


openvpn    net    186.201.43.xxx


Or maybe a dynamic dns ?!?

By the way, I am using 8096 bits in the encryption .


Fábio Rabelo


------------------------------------------------------------------------------
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don''t ask for help often.
Plus, you''ll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey

On Jul 28, 2011, at 4:03 PM, Fábio Rabelo wrote:
> I am listening all that talk about vpn, and a question come in my mind :
> 
> I have some systems working with openvpn in bridge mode, everything ok .
> 
> But I will need to add more connections, some fixed and some from notebooks
with no fixed place, mobile ones ...
> 
> So, I will not have static ips to suply to /etc/shorewall/tunnels file, I
can use any in the place of the ip in this :
> 
> 
> openvpn    net    186.201.43.xxx
From shorewall-tunnels(5):

"If the remote gateway has no fixed address (Road Warrior) then specify the
gateway as 0.0.0.0/0."

-Tom

Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________




------------------------------------------------------------------------------
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don''t ask for help often.
Plus, you''ll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey