Re: Disabling Policy Groups

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Paul" == Paul Wouters <[email protected]> writes:
    Paul> On Mon, 17 Feb 2003, Michael Richardson wrote:

    >> What I'd prefer to have is an implicit conn that looks like:
    >> 
    >> conn private
    >> type=tunnel
    >> left=%defaultroute
    >> leftsubnet=%opportunisticsubnet

    Paul> I take it you are not suggesting to automaticly find and route any
    Paul> local 
    Paul> subnet? That might be very unwanted on a firewall with private ip
    Paul> space. 

  Yes, agreed.
  The intention is that the list of CIDR lives in a file. If empty, then
it is just the host itself.

  Maybe someone will do a nice program to edit these things.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] [email protected] http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBPlKYU4qHRg3pndX9AQHiPwQAh7gIfNwl9TtAKhvc6V9LMA7UI+QL9O3R
hr/+UX8fV+r3/Bhx0epLqY7ckwFXf3XDFWi3b0PlKIvG6enlIr7+38kVL3mXR9Rz
dcJva8P0pTLqwEed/SWScFMI1jn7TrFZxZrGCbqRmTICv0/B+AIv5rh/vgtfemCb
6Dx1BBmu8J0=
=gi6h
-----END PGP SIGNATURE-----