Hi! I have modified the SuSEfirewall2 Script (Version 2.1) for better support of FreeSWAN/IPSEC. The script is attached (bzip2 compressed and base64 coded). Additionally, you have to add the below options to /etc/rc.config.d/firewall2.rc.config to make the script working correcly. The below settings are examples. Any comments/suggestions/feedback? I hope, that my work will be part of the next SuSEfirewall2 releases. BTW: I have already sent it to the maintainer (marc@suse.de) and I am waiting for response from him. -------------------------------------------------------- # # 19.) # Say yes, if you use IPSEC # Defaults to "no" # FW_IPSEC="yes" # # 20.) # IPSEC device # FW_DEV_IPSEC="ipsec0" # 21.) # local/remote network # masquerading is disabled through the tunnel automatically, # if you enabled it above # FW_IPSEC_LOCALNET="192.168.2.0/24" FW_IPSEC_REMOTENET="192.168.3.0/24" ------------------------------------------------------ -- CU, Christoph