Re: questions about isakmp.policy file

[Damien Miller <djm@mindrot.org>]

On Wed, 6 Jun 2001, Jack wrote:

> Hi,
>
> Now I want to add some limitation in the policy file of
> isakmpd, such as remote_filter_port, remote_filter_proto,
> remote_filter, remote_filter_type and etc. I read the mannual
> page of isakmpd.policy. But I think it's not very clear about the
> sepcification in this page and there are no examples on this aspect.
>
> Do you know any examples and more specifications about this? Show me
> please.

man 5 keynote

> Another question, if I want to let the remote network just can ftp
> or telnet the local network through VPN, can I add somthing in the
> policy file? How to do?

You can use ipf for this.

-d

-- 
| Damien Miller <djm@mindrot.org> \ ``E-mail attachments are the poor man's
| http://www.mindrot.org          /   distributed filesystem'' - Dan Geer