From d16ecc175346e93c9f5260972ff6d49bbb1a192d Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Sat, 20 Nov 2010 21:01:54 +0100 Subject: [PATCH] fixed iptables script of gateway alice --- .../ha/both-active/hosts/alice/etc/init.d/iptables | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/testing/tests/ha/both-active/hosts/alice/etc/init.d/iptables b/testing/tests/ha/both-active/hosts/alice/etc/init.d/iptables index 60b6b59240..95d3b88288 100755 --- a/testing/tests/ha/both-active/hosts/alice/etc/init.d/iptables +++ b/testing/tests/ha/both-active/hosts/alice/etc/init.d/iptables @@ -37,16 +37,16 @@ start() { iptables -A OUTPUT -p 50 -d PH_IP_DAVE -j ACCEPT # allow IKE - iptables -A INPUT -i eth0 -p udp --sport 500 --dport 500 -j ACCEPT - iptables -A OUTPUT -o eth0 -p udp --dport 500 --sport 500 -j ACCEPT + iptables -A INPUT -i eth1 -p udp --sport 500 --dport 500 -j ACCEPT + iptables -A OUTPUT -o eth1 -p udp --dport 500 --sport 500 -j ACCEPT # allow MobIKE - iptables -A INPUT -i eth0 -p udp --sport 4500 --dport 4500 -j ACCEPT - iptables -A OUTPUT -o eth0 -p udp --dport 4500 --sport 4500 -j ACCEPT + iptables -A INPUT -i eth1 -p udp --sport 4500 --dport 4500 -j ACCEPT + iptables -A OUTPUT -o eth1 -p udp --dport 4500 --sport 4500 -j ACCEPT # allow crl fetch from winnetou - iptables -A INPUT -i eth0 -p tcp --sport 80 -s PH_IP_WINNETOU -j ACCEPT - iptables -A OUTPUT -o eth0 -p tcp --dport 80 -d PH_IP_WINNETOU -j ACCEPT + iptables -A INPUT -i eth1 -p tcp --sport 80 -s PH_IP_WINNETOU -j ACCEPT + iptables -A OUTPUT -o eth1 -p tcp --dport 80 -d PH_IP_WINNETOU -j ACCEPT # allow ssh iptables -A INPUT -p tcp --dport 22 -j ACCEPT -- 2.47.3