OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andreas Schuldei (andreasschuldei.org)
Date: Tue Apr 03 2001 - 08:33:32 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    what is needed to let isakmpd and ipsec through a transparent
    bridging firewall?

    what do I miss:

    pass in quick on ep1
    pass out quick on ep1
     
    pass in quick on ep2 proto encap all
    pass in quick on ep2 proto tcp/udp all keep state
    pass in quick on ep2 proto icmp all keep state
    block in quick on ep2
     
     
    pass in quick on ep3 proto encap from any to 195.198.203.112/29
    pass in quick on ep3 proto tcp from any to 195.198.203.112/29 port = 22 flags S keep state
    pass in quick on ep3 proto tcp from any to 195.198.203.112/29 port = 500 flags S keep state
    block in quick on ep3