Re: Nortel VPN client through OBSD 3.1

J. Nathan Traiser wrote:

>pass out quick on $external proto udp from any to any port 500 flags S
>keep state
>

remove "flags S", anyway. No flag for UDP I would put it into 2 rules:

  pass in quick on $external proto udp from any port 500 to any port 500   pass out quick on $external proto udp from any port 500 to any port 500

same for ESP:

  pass in quick on $external proto esp from any to any   pass out quick on $external proto esp from any to any

Of course, it would be better to replace some of the "anys" by real host addresses.

> Now I have set the sysctl.conf to enable esp forwarding

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related openbsd.org Links advocacy announce bugs ipv6 misc ports ports-changes security-announce smp source-changes tech Request more information about Pantek

   "enable esp forwarding"??? What's that? Cedric Received on Thu Jan 23 11:37:59 2003