mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-05 00:00:45 -04:00
6d8890767c
This also restores the test as it was before the referenced commit so it
again, as written in the description, demonstrates that venus is unable
to ping sun without IPsec tunnel.
Fixes: f27fb58ae0ec ("testing: Update description and test evaluation of host2host-transport-nat")
29 lines
642 B
Plaintext
29 lines
642 B
Plaintext
*filter
|
|
|
|
# default policy is DROP
|
|
-P INPUT DROP
|
|
-P OUTPUT DROP
|
|
-P FORWARD DROP
|
|
|
|
# allow IKE
|
|
-A INPUT -i eth0 -p udp --dport 500 -j ACCEPT
|
|
-A OUTPUT -o eth0 -p udp --sport 500 -j ACCEPT
|
|
|
|
# allow MobIKE
|
|
-A INPUT -i eth0 -p udp --dport 4500 -j ACCEPT
|
|
-A OUTPUT -o eth0 -p udp --sport 4500 -j ACCEPT
|
|
|
|
# allow ssh
|
|
-A INPUT -p tcp --dport 22 -j ACCEPT
|
|
-A OUTPUT -p tcp --sport 22 -j ACCEPT
|
|
|
|
# allow crl fetch from winnetou
|
|
-A INPUT -i eth0 -p tcp --sport 80 -s PH_IP_WINNETOU -j ACCEPT
|
|
-A OUTPUT -o eth0 -p tcp --dport 80 -d PH_IP_WINNETOU -j ACCEPT
|
|
|
|
# allow ICMP
|
|
-A INPUT -i eth0 -p icmp -j ACCEPT
|
|
-A OUTPUT -o eth0 -p icmp -j ACCEPT
|
|
|
|
COMMIT
|