<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>Hello,</p>
<p>I am trying to fix that issue, that the responder works as a gateway and and a server, thus not only the FORWARD rules needs to be added but the INPUT rules also. The pluto interface(eth1) has only SSH/IPSEC ports enabled, other services listening on another interface(eth0).</p>
<p>The packects coming from the RW not accepted (eth1), and want to add dynamic rules as the FORWARDs.</p>
<p>So I was checking default updown script invoked by leftfirewall and found that $PLUTO_HOST_ACCESS variable is used some times, but not initialized in the script.</p>
<p> if [ -n "$PLUTO_MY_SOURCEIP" -o -n "$PLUTO_HOST_ACCESS" ]<br /> then<br /> iptables -I INPUT 1 -i $PLUTO_INTERFACE -p $PLUTO_MY_PROTOCOL \<br /> -s $PLUTO_PEER_CLIENT $S_PEER_PORT \<br /> -d $PLUTO_MY_CLIENT $D_MY_PORT $IPSEC_POLICY_IN -j ACCEPT<br /> iptables -I OUTPUT 1 -o $PLUTO_INTERFACE -p $PLUTO_PEER_PROTOCOL \<br /> -s $PLUTO_MY_CLIENT $S_MY_PORT \<br /> -d $PLUTO_PEER_CLIENT $D_PEER_PORT $IPSEC_POLICY_OUT -j ACCEPT<br /> fi</p>
<p>Where from is getting its value?</p>
<div>-- <br />
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Tisztelettel:<br /> Vukovics Mihály</div>
</div>
</body></html>