<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">I have a giant list here…… Why is this happening?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># iptables -L -n<o:p></o:p></p>
<p class="MsoNormal">Chain INPUT (policy ACCEPT)<o:p></o:p></p>
<p class="MsoNormal">target prot opt source destination<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Chain FORWARD (policy ACCEPT)<o:p></o:p></p>
<p class="MsoNormal">target prot opt source destination<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.24 0.0.0.0/0 policy match dir in pol ipsec reqid 333 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.24 policy match dir out pol ipsec reqid 333 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.23 0.0.0.0/0 policy match dir in pol ipsec reqid 331 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.23 policy match dir out pol ipsec reqid 331 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.24 0.0.0.0/0 policy match dir in pol ipsec reqid 329 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.24 policy match dir out pol ipsec reqid 329 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 328 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 328 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 327 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 327 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 326 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 326 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 325 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 325 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 324 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 324 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 322 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 322 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 321 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 321 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 319 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 319 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 317 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 317 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 316 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 316 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 315 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 315 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.23 0.0.0.0/0 policy match dir in pol ipsec reqid 313 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.23 policy match dir out pol ipsec reqid 313 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 312 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 312 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 311 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 311 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 309 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 309 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 306 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 306 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 10.244.134.22 0.0.0.0/0 policy match dir in pol ipsec reqid 305 proto 50<o:p></o:p></p>
<p class="MsoNormal">ACCEPT all -- 0.0.0.0/0 10.244.134.22 policy match dir out pol ipsec reqid 305 proto 50<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="377" style="width:282.75pt">
<tbody>
<tr style="height:116.8pt">
<td width="216" style="width:2.25in;padding:0in 0in 0in 0in;height:116.8pt">
<p class="MsoNormal" style="line-height:115%"><b>Regards,</b><b><o:p></o:p></b></p>
<p class="MsoNormal" style="line-height:115%"><b><i><o:p> </o:p></i></b></p>
<p class="MsoNormal" style="line-height:115%"><b><i>Adrian Milanoski</i></b><span style="font-size:8.0pt;line-height:115%"><br>
Lab Administrator<span style="color:black"><o:p></o:p></span></span></p>
<p class="MsoNormal" style="line-height:115%"><span style="font-size:8.0pt;line-height:115%">BBOS WiFI VPN. Security Testing – R&D<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:115%"><span style="font-size:8.0pt;line-height:115%">Tel.(289) 261-5801 | Cel: (647) 289-261-5801<br>
Email <span style="color:black"> </span></span><span style="font-size:8.0pt;line-height:115%;color:black"><a href="mailto:amilanoski@blackberry.com">amilanoski@blackberry.com</a></span><b><span style="color:#003049"><o:p></o:p></span></b></p>
</td>
<td width="161" style="width:120.75pt;padding:0in 0in 0in 0in;height:116.8pt">
<p class="MsoNormal" style="line-height:115%"><o:p> </o:p></p>
<p class="MsoNormal" style="line-height:115%"><o:p> </o:p></p>
<p class="MsoNormal" style="text-align:justify"><span style="color:#1F497D"><img border="0" width="113" height="27" id="_x0000_i1030" src="cid:image001.jpg@01CF392F.92A4BE30" alt="Description: Description: cid:image001.gif@01CDFFB4.0099AD80"></span><a href="http://www.blackberry.com/"><span style="color:#1F497D;text-decoration:none"><img border="0" width="10" height="10" id="_x0000_i1029" src="cid:image002.jpg@01CF392F.92A4BE30" alt="Description: Description: Description: hme_scrn_ind_new_notification_Precsn_Zen_801421_11"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:115%"><o:p> </o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Adrian Milanoski
<br>
<b>Sent:</b> Wednesday, March 05, 2014 9:17 PM<br>
<b>To:</b> Adrian Milanoski; users@lists.strongswan.org<br>
<b>Subject:</b> RE: [strongSwan] Why is strongswan keeping so many enttires in my iptables?????<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Any update on why this is happening?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="377" style="width:282.75pt">
<tbody>
<tr style="height:116.8pt">
<td width="216" style="width:2.25in;padding:0in 0in 0in 0in;height:116.8pt">
<p class="MsoNormal" style="line-height:115%"><b>Regards,<o:p></o:p></b></p>
<p class="MsoNormal" style="line-height:115%"><b><i><o:p> </o:p></i></b></p>
<p class="MsoNormal" style="line-height:115%"><b><i>Adrian Milanoski</i></b><span style="font-size:8.0pt;line-height:115%"><br>
Lab Administrator<span style="color:black"><o:p></o:p></span></span></p>
<p class="MsoNormal" style="line-height:115%"><span style="font-size:8.0pt;line-height:115%">BBOS WiFI VPN. Security Testing – R&D<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:115%"><span style="font-size:8.0pt;line-height:115%">Tel.(289) 261-5801 | Cel: (647) 289-261-5801<br>
Email <span style="color:black"> <a href="mailto:amilanoski@blackberry.com">amilanoski@blackberry.com</a></span></span><b><span style="color:#003049"><o:p></o:p></span></b></p>
</td>
<td width="161" style="width:120.75pt;padding:0in 0in 0in 0in;height:116.8pt">
<p class="MsoNormal" style="line-height:115%"><o:p> </o:p></p>
<p class="MsoNormal" style="line-height:115%"><o:p> </o:p></p>
<p class="MsoNormal" style="text-align:justify"><span style="color:#1F497D"><img border="0" width="113" height="27" id="_x0000_i1025" src="cid:image003.jpg@01CF392F.92A4BE30" alt="Description: Description: cid:image001.gif@01CDFFB4.0099AD80"></span><a href="http://www.blackberry.com/"><span style="color:#1F497D;text-decoration:none"><img border="0" width="10" height="10" id="Picture_x0020_2" src="cid:image004.jpg@01CF392F.92A4BE30" alt="Description: Description: Description: hme_scrn_ind_new_notification_Precsn_Zen_801421_11"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:115%"><o:p> </o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> users-bounces@lists.strongswan.org [mailto:users-bounces@lists.strongswan.org]
<b>On Behalf Of </b>Adrian Milanoski<br>
<b>Sent:</b> Tuesday, March 04, 2014 5:50 PM<br>
<b>To:</b> users@lists.strongswan.org<br>
<b>Subject:</b> [strongSwan] Why is strongswan keeping so many enttires in my iptables?????<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">HI list,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have 300+ entries in my iptables –L and restarting strongswan doesn’t clear them and it is a production GW that I cannot simple restart. How can I resolve this? And why is it happening so I can resolve it for the future?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks in advance<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr style="height:105.2pt">
<td width="246" style="width:184.5pt;padding:0in 0in 0in 0in;height:105.2pt">
<p class="MsoNormal" style="line-height:115%"><b>Regards,<o:p></o:p></b></p>
<p class="MsoNormal" style="line-height:115%"><b><i><o:p> </o:p></i></b></p>
<p class="MsoNormal" style="line-height:115%"><b><i>Adrian Milanoski</i></b><span style="font-size:8.0pt;line-height:115%"><br>
Lab Administrator<span style="color:black"><o:p></o:p></span></span></p>
<p class="MsoNormal" style="line-height:115%"><span style="font-size:8.0pt;line-height:115%">BBOS WiFI VPN. Security Testing – R&D<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:115%"><span style="font-size:8.0pt;line-height:115%">4715 Tahoe Blvd, Mississauga, ON, Canada, L4W 0B5
<br>
Tel.(289) 261-5801 | Fax.(905) 629-7836 <br>
Email <span style="color:black"> </span></span><a href="mailto:amilanoski@blackberry.com"><span style="font-size:8.0pt;line-height:115%">amilanoski@blackberry.com</span></a><b><span style="color:#003049"><o:p></o:p></span></b></p>
</td>
<td width="150" style="width:112.5pt;padding:0in 0in 0in 0in;height:105.2pt">
<p class="MsoNormal" align="right" style="text-align:right;line-height:115%"><o:p> </o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;line-height:115%"><o:p> </o:p></p>
<p class="MsoNormal" style="text-align:justify"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D"><img border="0" width="113" height="27" id="Picture_x0020_5" src="cid:image005.jpg@01CF392F.92A4BE30" alt="Description: Description: cid:image001.gif@01CDFFB4.0099AD80"></span><a href="http://www.blackberry.com/"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D;text-decoration:none"><img border="0" width="10" height="10" id="Picture_x0020_6" src="cid:image006.jpg@01CF392F.92A4BE30" alt="Description: Description: Description: hme_scrn_ind_new_notification_Precsn_Zen_801421_11"></span></a><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" align="center" style="text-align:center;line-height:115%"><span style="font-size:12.0pt;line-height:115%"><o:p> </o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">---------------------------------------------------------------------<br>
This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information
by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission
by unintended recipients is not authorized and may be unlawful.<o:p></o:p></span></p>
</div>
---------------------------------------------------------------------<br>This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.<br></body>
</html>