Mailinglist Archive: opensuse-security (685 mails)

[Christoph Egger <egger@xxxxxxxxxxxxxx>]

Hi!

I have modified the SuSEfirewall2 Script (Version 2.1) for better support of 
FreeSWAN/IPSEC.

The script is attached (bzip2 compressed and base64 coded).

Additionally, you have to add the below options to 
/etc/rc.config.d/firewall2.rc.config to make the script working correcly.

The below settings are examples.

Any comments/suggestions/feedback?

I hope, that my work will be part of the next SuSEfirewall2 releases.

BTW: I have already sent it to the maintainer (marc@xxxxxxx) and I am waiting 
for response from him.

--------------------------------------------------------
#
# 19.)
# Say yes, if you use IPSEC
# Defaults to "no"
#
FW_IPSEC="yes"

#
# 20.)
# IPSEC device
#
FW_DEV_IPSEC="ipsec0"

# 21.)
# local/remote network
# masquerading is disabled through the tunnel automatically,
# if you enabled it above
#
FW_IPSEC_LOCALNET="192.168.2.0/24"
FW_IPSEC_REMOTENET="192.168.3.0/24"
------------------------------------------------------

-- 
CU,
Christoph