testing: Enable outbound FWD policies in swanctl/manual-prio scenario
authorTobias Brunner <tobias@strongswan.org>
Thu, 18 Aug 2016 15:09:15 +0000 (17:09 +0200)
committerTobias Brunner <tobias@strongswan.org>
Wed, 28 Sep 2016 15:56:43 +0000 (17:56 +0200)
testing/tests/swanctl/manual-prio/hosts/moon/etc/swanctl/swanctl.conf

index 53883f7..5fefdcd 100755 (executable)
@@ -16,7 +16,8 @@ connections {
             local_ts  = 10.1.0.0/16
             priority = 2
             interface = eth0
-           
+            policies_fwd_out = yes
+
             esp_proposals = aes128gcm128-modp3072
          }
       }
@@ -32,15 +33,15 @@ connections {
             local_ts  = 0.0.0.0/0
             remote_ts = 0.0.0.0/0
             interface = eth0
-            priority = 4 
+            priority = 4
 
-            mode = drop 
+            mode = drop
             start_action = trap
          }
          pass-ssh-in {
             local_ts  = 0.0.0.0/0[tcp/ssh]
             remote_ts = 0.0.0.0/0[tcp]
-            priority = 1 
+            priority = 1
 
             mode = pass
             start_action = trap
@@ -61,6 +62,6 @@ connections {
             mode = pass
             start_action = trap
          }
-      }  
+      }
    }
 }