# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/P-ip6tables-disable-IPSEC-F8,v 1.2 2008/03/14 16:24:35 pb22 Exp $
# patch to disable IPSEC (F8 only)
# patch-file hasno : ^-A.RH-Firewall-1-INPUT.-m.ipv6header.--header.50.-j.ACCEPT
# patch-file distmatches = Fedora.release.8..W
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/sysconfig/ip6tables	2008-03-06 09:21:22.000000000 +0000
+++ /etc/sysconfig/ip6table	2008-03-06 10:12:58.000000000 +0000
@@ -11,2 +11,3 @@
--A RH-Firewall-1-INPUT -m ipv6header --header 50 -j ACCEPT
--A RH-Firewall-1-INPUT -m ipv6header --header 51 -j ACCEPT
+#2 cl.cam.ac.uk: disable AH and ESP by default as we don't use them
+#A RH-Firewall-1-INPUT -m ipv6header --header 50 -j ACCEPT
+#A RH-Firewall-1-INPUT -m ipv6header --header 51 -j ACCEPT
