RE: [Shorewall-users] ipsec: subnet/endpoint to endpoint

[Bertrand R. <ber...@it...>]

> 
> --On Saturday, December 21, 2002 01:07:29 AM +0100 Bertrand Renuart 
> <ber...@it...> wrote:
> 
> >
> > After they have rebooted, the handshaking is till ok, but:
> > - a left host (not the fw) cannot ping a right host (not 
> the right fw)
> > anymore;
> > - idem in the other direction
> > BUT
> > - left host can ping the internal interface of right fw
> > - right host can ping the internal interface of left fw
> >
> > That's the only thing that still works ;?!??
> >
> 
> That sounds like you have your tunnels configured as 
> host->subnet rather 
> than subnet->subnet.
> 

BTW, I don't have any trace of packets dropped/rejected in the firewall
logs...