diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/30SourceAddressVerification mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/30SourceAddressVerification --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/30SourceAddressVerification 1970-01-01 10:00:00.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/30SourceAddressVerification 2003-04-12 13:45:44.000000000 +1000 @@ -0,0 +1,5 @@ + # Turn on Source Address Verification + for f in /proc/sys/net/ipv4/conf/*/rp_filter; do + echo 0 > $f + done + diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/35ForwardIPSEC mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/35ForwardIPSEC --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/35ForwardIPSEC 1970-01-01 10:00:00.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/35ForwardIPSEC 2003-04-12 13:50:08.000000000 +1000 @@ -0,0 +1,4 @@ + # Set up chains which allow us to bypass prerouting for IPSEC networks + /sbin/iptables --table nat --new-chain PreroutingBypassIPSEC + /sbin/iptables --table nat --append PREROUTING --jump PreroutingBypassIPSEC + diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/40AllowIPSEC mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/40AllowIPSEC --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/40AllowIPSEC 1970-01-01 10:00:00.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/40AllowIPSEC 2003-04-12 13:56:17.000000000 +1000 @@ -0,0 +1,7 @@ + # Set up chains which allow us to capture IPSEC connections + /sbin/iptables --new-chain InputAllowIPSEC + /sbin/iptables --append InputAllowIPSEC -i ipsec+ -j ACCEPT + /sbin/iptables --append INPUT --jump InputAllowIPSEC + /sbin/iptables --new-chain ForwardAllowIPSEC + /sbin/iptables --append FORWARD --jump ForwardAllowIPSEC + diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/45AllowIPSEC mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/45AllowIPSEC --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/45AllowIPSEC 1970-01-01 10:00:00.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/45AllowIPSEC 2003-04-12 13:26:40.000000000 +1000 @@ -0,0 +1,5 @@ +{ + my $status = $ipsec{status} || 'disabled'; + + $OUT = allow_udp_in(500, ($status eq 'enabled' )); +} diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/55AllowESP mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/55AllowESP --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/55AllowESP 1970-01-01 10:00:00.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/55AllowESP 2003-04-12 13:46:03.000000000 +1000 @@ -0,0 +1,6 @@ + /sbin/iptables --new-chain esp-in + /sbin/iptables --append INPUT -p 50 -j esp-in + /sbin/iptables --append INPUT -p 50 -j denylog + /sbin/iptables --append esp-in -d \! $OUTERNET -j denylog + /sbin/iptables --append esp-in -j denylog + diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustESP mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustESP --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustESP 1970-01-01 10:00:00.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates/etc/rc.d/init.d/masq/90adjustESP 2003-04-12 13:46:11.000000000 +1000 @@ -0,0 +1,8 @@ +{ + my $ipsec_status = $ipsec{status} || 'disabled'; + my $target = ($ipsec_status eq 'enabled') ? "ACCEPT" : "denylog"; + + $OUT = + " /sbin/iptables --replace esp-in 1 -d \\! \$OUTERNET -j denylog\n" . + " /sbin/iptables --replace esp-in 2 -j $target"; +} diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/30SourceAddressVerification mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/30SourceAddressVerification --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/30SourceAddressVerification 2003-04-12 13:45:44.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/30SourceAddressVerification 1970-01-01 10:00:00.000000000 +1000 @@ -1,5 +0,0 @@ - # Turn on Source Address Verification - for f in /proc/sys/net/ipv4/conf/*/rp_filter; do - echo 0 > $f - done - diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/35ForwardIPSEC mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/35ForwardIPSEC --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/35ForwardIPSEC 2003-04-12 13:50:08.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/35ForwardIPSEC 1970-01-01 10:00:00.000000000 +1000 @@ -1,4 +0,0 @@ - # Set up chains which allow us to bypass prerouting for IPSEC networks - /sbin/iptables --table nat --new-chain PreroutingBypassIPSEC - /sbin/iptables --table nat --append PREROUTING --jump PreroutingBypassIPSEC - diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/40AllowIPSEC mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/40AllowIPSEC --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/40AllowIPSEC 2003-04-12 13:56:17.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/40AllowIPSEC 1970-01-01 10:00:00.000000000 +1000 @@ -1,7 +0,0 @@ - # Set up chains which allow us to capture IPSEC connections - /sbin/iptables --new-chain InputAllowIPSEC - /sbin/iptables --append InputAllowIPSEC -i ipsec+ -j ACCEPT - /sbin/iptables --append INPUT --jump InputAllowIPSEC - /sbin/iptables --new-chain ForwardAllowIPSEC - /sbin/iptables --append FORWARD --jump ForwardAllowIPSEC - diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/45AllowIPSEC mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/45AllowIPSEC --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/45AllowIPSEC 2003-04-12 13:26:40.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/45AllowIPSEC 1970-01-01 10:00:00.000000000 +1000 @@ -1,5 +0,0 @@ -{ - my $status = $ipsec{status} || 'disabled'; - - $OUT = allow_udp_in(500, ($status eq 'enabled' )); -} diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/55AllowESP mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/55AllowESP --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/55AllowESP 2003-04-12 13:46:03.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/55AllowESP 1970-01-01 10:00:00.000000000 +1000 @@ -1,6 +0,0 @@ - /sbin/iptables --new-chain esp-in - /sbin/iptables --append INPUT -p 50 -j esp-in - /sbin/iptables --append INPUT -p 50 -j denylog - /sbin/iptables --append esp-in -d \! $OUTERNET -j denylog - /sbin/iptables --append esp-in -j denylog - diff -Nur -x '*.orig' -x '*.rej' smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/90adjustESP mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/90adjustESP --- smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/90adjustESP 2003-04-12 13:46:11.000000000 +1000 +++ mezzanine_patched_smeserver-ipsec-0.0.2/root/etc/e-smith/templates-custom/etc/rc.d/init.d/masq/90adjustESP 1970-01-01 10:00:00.000000000 +1000 @@ -1,8 +0,0 @@ -{ - my $ipsec_status = $ipsec{status} || 'disabled'; - my $target = ($ipsec_status eq 'enabled') ? "ACCEPT" : "denylog"; - - $OUT = - " /sbin/iptables --replace esp-in 1 -d \\! \$OUTERNET -j denylog\n" . - " /sbin/iptables --replace esp-in 2 -j $target"; -}