Tobias Brunner
bb66b4d56b
Don't make clients wait for the TCP connections to timeout by dropping packets. By rejecting them the OCSP requests fail immediately.
7 lines
279 B
Plaintext
7 lines
279 B
Plaintext
moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
|
|
carol::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j REJECT --reject-with tcp-reset
|
|
moon::ipsec start
|
|
carol::ipsec start
|
|
carol::expect-connection home
|
|
carol::ipsec up home
|