Re: ipsec and transparent bridge firewall

[Andreas Schuldei <andreas@schuldei.org>]

* Andreas Schuldei (andreas@schuldei.org) [010403 15:44]:
> what is needed to let isakmpd and ipsec through a transparent
> bridging firewall?
> 
> what do I miss:
>  
> pass in quick on ep2 proto encap all
> pass in quick on ep2 proto tcp/udp all keep state
> pass in quick on ep2 proto icmp all keep state
> block in quick on ep2
>  
>  
> pass in quick on ep3 proto encap from any to 195.198.203.112/29
> pass in quick on ep3 proto tcp from any to 195.198.203.112/29 port = 22 flags S keep state
> pass in quick on ep3 proto tcp from any to 195.198.203.112/29 port = 500 flags S keep state
> block in quick on ep3

actually ep2 and ep3 are the interfaces connected by the bridge.
ep1 is for remote logging.