[strongSwan] Avoid leakage of packets addressed to/from private IP space

[Simon Deziel]

On 09/07/2015 07:31 PM, Noel Kuntze wrote:
>> The distribution which I have used did not have ebtables-svae and ebtables-restore scripts.
>> Strange enough: http://packages.ubuntu.com/precise/amd64/ebtables/filelist
>> I agree with your points. I think my script can be useful to initialize the ebtables tables.
>> And after that ebtables-save and ebtables-restore shall be used.
> 
> Even trusty does not ship ebtables-{save,restore}. Probably some
> missing information about the existence of those programs on
> Canonical's part.

On Debian/Ubuntu, the init script can be used to save/load the rules
atomically.

HTH,
Simon


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 966 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150909/0d439d2b/attachment.pgp>