programs/examples/oe.conf.in

   1 # defines default policy groups for Opportunistic Encryption (OE)
   2 #
   3 # RCSID $Id: oe.conf.in,v 1.1 2004/08/28 11:25:09 as Exp $
   4
   5 conn packetdefault
   6         type=tunnel
   7         leftsubnet=0.0.0.0/0
   8         right=%opportunistic
   9         failureshunt=passthrough
  10         keyingtries=3
  11         ikelifetime=1h
  12         keylife=1h
  13         rekey=no
  14         also=oe_defaults
  15         auto=route
  16
  17 conn clear
  18         type=passthrough
  19         authby=never
  20         right=%group
  21         also=oe_defaults
  22         auto=route
  23
  24 conn clear-or-private
  25         type=passthrough
  26         right=%opportunisticgroup
  27         failureshunt=passthrough
  28         keyingtries=3
  29         ikelifetime=1h
  30         keylife=1h
  31         rekey=no
  32         also=oe_defaults
  33         auto=route
  34
  35 conn private-or-clear
  36         type=tunnel
  37         right=%opportunisticgroup
  38         failureshunt=passthrough
  39         keyingtries=3
  40         ikelifetime=1h
  41         keylife=1h
  42         rekey=no
  43         also=oe_defaults
  44         auto=route
  45
  46 conn private
  47         type=tunnel
  48         right=%opportunisticgroup
  49         failureshunt=drop
  50         keyingtries=3
  51         ikelifetime=1h
  52         keylife=1h
  53         rekey=no
  54         also=oe_defaults
  55         auto=route
  56
  57 conn block
  58         type=reject
  59         authby=never
  60         right=%group
  61         also=oe_defaults
  62         auto=route
  63
  64 conn oe_defaults
  65         left=%defaultroute
  66         leftid=%myid
  67         leftrsasigkey=%dnsondemand
  68         rightrsasigkey=%dnsondemand