Ubuntu
strongswan package

  1. Bug #1309594
  2. Comment #6

Comment 6 for bug 1309594

Revision history for this message
Simon Déziel (sdeziel) wrote :

@ttzforj, I understand the need for a userspace implementation when using OpenVZ (LXC too?) but for iptables, are you aware of the policy module? I find it very useful and relatively easy to use:

  # Allow only SSH when over IPsec
  iptables -A INPUT -p tcp --dport 22 -m policy --dir in --pol ipsec -j ACCEPT
  iptables -A INPUT -p tcp --dport 22 -j REJECT

Regards,
Simon