[strongSwan] Remove default policy

Naveen Neelakanta naveen.b.neelakanta at gmail.com
Wed Mar 23 04:02:48 CET 2016


Hello,

Is it possible to configure strongswan not to add the below default
policy rules.
I am running strong swan in TEST namespace on linux and i don't see
the arp working from the root name space to namespace interface.  I
would like to know why ARP between the root namespace and Test
namespace is not working if i have the below policy rules. i have used
veth pair to connect namespace and root .

src 0.0.0.0/0 dst 0.0.0.0/0
        socket in priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
        socket out priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
        socket in priority 0
src 0.0.0.0/0 dst 0.0.0.0/0
        socket out priority 0
src ::/0 dst ::/0
        socket in priority 0
src ::/0 dst ::/0
        socket out priority 0
src ::/0 dst ::/0
        socket in priority 0
src ::/0 dst ::/0
        socket out priority 0

Thanks,
Naveen


More information about the Users mailing list