firewall changes for F-9+

[Callum Lerwick]

On Thu, 2008-01-17 at 19:06 +0100, Adam Tkac wrote:
> I think you don't need open ports for VPN clients. State firewall
> should take care about such situation, doesn't?

In the case of IPSec, it is implemented as a distinct protocol directly
on top of IP, so no. It does not run over TCP or UDP.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20080117/feda65de/attachment.sig>