diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2010-11-20 21:01:54 +0100 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2010-11-20 21:01:54 +0100 |
| commit | d16ecc175346e93c9f5260972ff6d49bbb1a192d (patch) | |
| tree | 0bc15dbe1dca3e7f2e7c69537803341baf5cccc0 /testing | |
| parent | aafe3b090eca14f68e6ed7813456b3a9ae42f4e6 (diff) | |
| download | strongswan-d16ecc175346e93c9f5260972ff6d49bbb1a192d.tar.bz2 strongswan-d16ecc175346e93c9f5260972ff6d49bbb1a192d.tar.xz | |
fixed iptables script of gateway alice
Diffstat (limited to 'testing')
| -rwxr-xr-x | testing/tests/ha/both-active/hosts/alice/etc/init.d/iptables | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/testing/tests/ha/both-active/hosts/alice/etc/init.d/iptables b/testing/tests/ha/both-active/hosts/alice/etc/init.d/iptables index 60b6b5924..95d3b8828 100755 --- a/testing/tests/ha/both-active/hosts/alice/etc/init.d/iptables +++ b/testing/tests/ha/both-active/hosts/alice/etc/init.d/iptables @@ -37,16 +37,16 @@ start() { iptables -A OUTPUT -p 50 -d PH_IP_DAVE -j ACCEPT # allow IKE - iptables -A INPUT -i eth0 -p udp --sport 500 --dport 500 -j ACCEPT - iptables -A OUTPUT -o eth0 -p udp --dport 500 --sport 500 -j ACCEPT + iptables -A INPUT -i eth1 -p udp --sport 500 --dport 500 -j ACCEPT + iptables -A OUTPUT -o eth1 -p udp --dport 500 --sport 500 -j ACCEPT # allow MobIKE - iptables -A INPUT -i eth0 -p udp --sport 4500 --dport 4500 -j ACCEPT - iptables -A OUTPUT -o eth0 -p udp --dport 4500 --sport 4500 -j ACCEPT + iptables -A INPUT -i eth1 -p udp --sport 4500 --dport 4500 -j ACCEPT + iptables -A OUTPUT -o eth1 -p udp --dport 4500 --sport 4500 -j ACCEPT # allow crl fetch from winnetou - iptables -A INPUT -i eth0 -p tcp --sport 80 -s PH_IP_WINNETOU -j ACCEPT - iptables -A OUTPUT -o eth0 -p tcp --dport 80 -d PH_IP_WINNETOU -j ACCEPT + iptables -A INPUT -i eth1 -p tcp --sport 80 -s PH_IP_WINNETOU -j ACCEPT + iptables -A OUTPUT -o eth1 -p tcp --dport 80 -d PH_IP_WINNETOU -j ACCEPT # allow ssh iptables -A INPUT -p tcp --dport 22 -j ACCEPT |