From 2bcaaf01a5fcc2d2ce618da6af30a43a70d03d80 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Sun, 3 Nov 2013 05:54:11 +0100
Subject: Use a dedicated, non-routable, IPv4 for IPSec.

At the each IPSec end-point the traffic is DNAT'ed to / MASQUERADE'd
from our dedicated IP after ESP decapsulation. Also, some IP tables
ensure that alien (not coming from / going to the tunnel end-point) is
dropped.
---
 site.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'site.yml')

diff --git a/site.yml b/site.yml
index 815c4fb..a232764 100644
--- a/site.yml
+++ b/site.yml
@@ -1,4 +1,4 @@
---- 
+---
 # ansible-playbook -i stage_vms site.yml -t rkhunter
 - name: all
   hosts: all
-- 
cgit v1.2.3