metro issueshttps://git.occrp.org/libre/metro/-/issues2020-03-05T19:05:26Zhttps://git.occrp.org/libre/metro/-/issues/2Find a modern racoon replacement2020-03-05T19:05:26ZJurre van BergenFind a modern racoon replacementAs racoon is more than a decade old, we might want to look into something more modern.
This ticket is to explore possible options and see what might work for some testing.
Some inspiration for options: https://github.com/trailofbits/algoAs racoon is more than a decade old, we might want to look into something more modern.
This ticket is to explore possible options and see what might work for some testing.
Some inspiration for options: https://github.com/trailofbits/algoJurre van BergenJurre van Bergenhttps://git.occrp.org/libre/metro/-/issues/1iptables DMZ for ipsec-originating traffic?2019-04-08T22:17:54ZAleksandar Todorovićiptables DMZ for ipsec-originating traffic?Might be interesting to implement at some point:
```
iptables -A INPUT -m policy --pol ipsec --dir in -p tcp -j ACCEPT
```Might be interesting to implement at some point:
```
iptables -A INPUT -m policy --pol ipsec --dir in -p tcp -j ACCEPT
```