interface ppp+ internet src not "${UNROUTABLE_IPS}"
policy drop
protection strong
server ident reject with tcp-reset
server ICMP accept
server custom cvpn-ka udp/21212 default accept
server ssh accept
client all accept
With policy drop, I'd expect "connection timed out" rather than connection refused. So I can only assume that this section isn't being considered applicable for some reason.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
no subject
Date: 2005-02-02 04:27 am (UTC)interface ppp+ internet src not "${UNROUTABLE_IPS}" policy drop protection strong server ident reject with tcp-reset server ICMP accept server custom cvpn-ka udp/21212 default accept server ssh accept client all acceptWith policy drop, I'd expect "connection timed out" rather than connection refused. So I can only assume that this section isn't being considered applicable for some reason.