It would be simply EXCELENT to have such a facility.
I have to use 2 m0n0 boxes to do this and I'm not happy at all about
this.
I've started to to think to look for something else, but after I've read
this mail I am more confident in the m0n0's future ;-)

Best regards
Catalin

> -----Original Message-----
> From: Bjoern Euler [mailto:lists at edain dot de]
> Sent: 11 March 2007 19:54
> To: m0n0wall at lists dot m0n0 dot ch
> Cc: Kristian Shaw
> Subject: Re: [m0n0wall] Apply rules against IPsec Tunnels
> 
> On 10.03.2007 22:25 Kristian Shaw wrote:
> > Hello,
> >
> > Last year I had a play around with this and produced a test version
of
> > m0n0wall 1.21 that allowed you to filter traffic from IPSEC tunnels.
> > m0n0wall works on the principal that the firewall rules are applied
to
> > an interface inbound, and everything is passed outbound (since its
> > already filtered).
> 
> > If this is something that may interest anyone I'll see if I can
create a
> > version based on the 1.23 image.
> 
> Hi,
> this sounds very interesting!
> I also played with a m0n0wall version that allowed out filtering to
> catch incoming IPSec traffic but never did any GUI stuff.
> 
> If you could share your modifications with this list or even put
> together a modified version based on 1.23 I'd be very happy to test
and
> use it!
> 
> kind regards
> -Bjoern
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>