<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi Adrian,<div><br></div><div>What do you mean by ‘doesn’t clear them’ ? The counter? Strongswan generate iptables rules each time when you restarted it so you will see the same rules each time. You can disabled it if you want to, it depends on what do you have at the configuration file. There is a special option for that called left firewall.</div><div><br></div><div>Can you give me a little bit more details about that?</div><div><br></div><div>Thanks,</div><div>Pawel</div><div><br><div><div>On 6 Mar 2014, at 02:16, Adrian Milanoski <<a href="mailto:amilanoski@blackberry.com">amilanoski@blackberry.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div lang="EN-US" link="blue" vlink="purple" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div class="WordSection1" style="page: WordSection1;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">Any update on why this is happening?<o:p></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><div><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="377" style="width: 282.75pt;"><tbody><tr style="height: 116.8pt;"><td width="216" style="width: 2.25in; padding: 0in; height: 116.8pt;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><b>Regards,</b><b><o:p></o:p></b></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><b><i> </i></b></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><b><i>Adrian Milanoski</i></b><span style="font-size: 8pt; line-height: 12px;"><br>Lab Administrator<span style=""><o:p></o:p></span></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><span style="font-size: 8pt; line-height: 12px;">BBOS WiFI VPN. Security Testing – R&D<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><span style="font-size: 8pt; line-height: 12px;">Tel.(289) 261-5801 | Cel: (647) 289-261-5801<br>Email <span style=""></span></span><span style="font-size: 8pt; line-height: 12px;"><a href="mailto:amilanoski@blackberry.com" style="color: purple; text-decoration: underline;">amilanoski@blackberry.com</a></span><b><span style="color: rgb(0, 48, 73);"><o:p></o:p></span></b></div></td><td width="161" style="width: 120.75pt; padding: 0in; height: 116.8pt;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; text-align: justify;"><span style="color: rgb(31, 73, 125);"><image003.jpg></span><a href="http://www.blackberry.com/" style="color: purple; text-decoration: underline;"><span style="color: rgb(31, 73, 125); text-decoration: none;"><image004.jpg></span></a><span style="color: rgb(31, 73, 125);"><o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><o:p> </o:p></div></td></tr></tbody></table><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><div><div style="border-style: solid none none; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding: 3pt 0in 0in;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;"><span class="Apple-converted-space"> </span><a href="mailto:users-bounces@lists.strongswan.org" style="color: purple; text-decoration: underline;">users-bounces@lists.strongswan.org</a><span class="Apple-converted-space"> </span>[<a href="mailto:users-bounces@lists.strongswan.org" style="color: purple; text-decoration: underline;">mailto:users-bounces@lists.strongswan.org</a>]<span class="Apple-converted-space"> </span><b>On Behalf Of<span class="Apple-converted-space"> </span></b>Adrian Milanoski<br><b>Sent:</b><span class="Apple-converted-space"> </span>Tuesday, March 04, 2014 5:50 PM<br><b>To:</b><span class="Apple-converted-space"> </span><a href="mailto:users@lists.strongswan.org" style="color: purple; text-decoration: underline;">users@lists.strongswan.org</a><br><b>Subject:</b><span class="Apple-converted-space"> </span>[strongSwan] Why is strongswan keeping so many enttires in my iptables?????<o:p></o:p></span></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">HI list,<o:p></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">I have 300+ entries in my iptables –L and restarting strongswan doesn’t clear them and it is a production GW that I cannot simple restart. How can I resolve this? And why is it happening so I can resolve it for the future?<o:p></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">Thanks in advance<o:p></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0"><tbody><tr style="height: 105.2pt;"><td width="246" style="width: 184.5pt; padding: 0in; height: 105.2pt;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><b>Regards,<o:p></o:p></b></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><b><i> </i></b></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><b><i>Adrian Milanoski</i></b><span style="font-size: 8pt; line-height: 12px;"><br>Lab Administrator<span style=""><o:p></o:p></span></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><span style="font-size: 8pt; line-height: 12px;">BBOS WiFI VPN. Security Testing – R&D<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 17px;"><span style="font-size: 8pt; line-height: 12px;">4715 Tahoe Blvd, Mississauga, ON, Canada, L4W 0B5<br>Tel.(289) 261-5801 | Fax.(905) 629-7836<span class="Apple-converted-space"> </span><br>Email <span style=""><span class="Apple-converted-space"> </span></span></span><a href="mailto:amilanoski@blackberry.com" style="color: purple; text-decoration: underline;"><span style="font-size: 8pt; line-height: 12px;">amilanoski@blackberry.com</span></a><b><span style="color: rgb(0, 48, 73);"><o:p></o:p></span></b></div></td><td width="150" style="width: 112.5pt; padding: 0in; height: 105.2pt;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; text-align: right; line-height: 17px;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; text-align: right; line-height: 17px;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; text-align: justify;"><span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: rgb(31, 73, 125);"><image005.jpg></span><a href="http://www.blackberry.com/" style="color: purple; text-decoration: underline;"><span style="font-size: 12pt; font-family: 'Times New Roman', serif; color: rgb(31, 73, 125); text-decoration: none;"><image006.jpg></span></a><span style="color: rgb(31, 73, 125);"><o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; text-align: center; line-height: 17px;"><span style="font-size: 12pt; line-height: 18px;"> </span></div></td></tr></tbody></table><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><span style="font-size: 12pt; font-family: 'Times New Roman', serif;">---------------------------------------------------------------------<br>This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.<o:p></o:p></span></div></div>---------------------------------------------------------------------<br>This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.<br>_______________________________________________<br>Users mailing list<br><a href="mailto:Users@lists.strongswan.org" style="color: purple; text-decoration: underline;">Users@lists.strongswan.org</a><br><a href="https://lists.strongswan.org/mailman/listinfo/users" style="color: purple; text-decoration: underline;">https://lists.strongswan.org/mailman/listinfo/users</a></div></blockquote></div><br></div></body></html>