#!/bin/sh
#
# Fichier de configuration du pare-feu
#
### BEGIN INIT INFO
# Provides:          firewall.sh
# Required-Start:    $syslog $network
# Required-Stop:     $syslog $network
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: Start firewall daemon at boot time
# Description:       Custom Firewall script
### END INIT INFO
 
fw_start () {

  iptables -t filter -P INPUT DROP
  iptables -t filter -P FORWARD DROP
  iptables -t filter -P OUTPUT DROP
  iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
  iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
  iptables -t filter -A INPUT -i lo -j ACCEPT
  iptables -t filter -A OUTPUT -o lo -j ACCEPT
  iptables -t filter -A INPUT -p tcp --dport <port ssh> -j ACCEPT
  iptables -t filter -A OUTPUT -p tcp --dport <port ssh> -j ACCEPT
  iptables -t nat -A POSTROUTING -s 10.42.42.0/27 -j MASQUERADE
  iptables -A INPUT -p tcp --dport 500 -j ACCEPT
  iptables -A INPUT -p tcp --dport 4500 -j ACCEPT

}
 
fw_stop () {

  iptables -F
  iptables -X
  iptables -t nat -F
  iptables -t nat -X
  iptables -t mangle -F
  iptables -t mangle -X
  iptables -P INPUT ACCEPT
  iptables -P FORWARD ACCEPT
  iptables -P OUTPUT ACCEPT

}
 
fw_clear () {

  iptables -F
  iptables -t nat -F
  iptables -t mangle -F
  iptables -P INPUT ACCEPT
  iptables -P FORWARD ACCEPT
  iptables -P OUTPUT ACCEPT

}
 
case "$1" in
start|restart)
  echo -n "Démarrage du pare-feu..."
  fw_stop 
  fw_start
  echo "done."
  ;;
stop)
  echo -n "Arrêt du pare-feu..."
  fw_stop
  echo "done."
  ;;
clear)
  echo -n "RAZ des règles..."
  fw_clear
  echo "done."
  ;;
*)
  echo "Usage: $0 {start|stop|restart|clear}"
  exit 1
  ;;
esac
exit 0

service firewall start

while true; do test=""; read  -t 20 -p "OK? " test ; \ [ -z "$test" ] && /etc/init.d/firewall clear && exit ; done

● xl2tpd.service - LSB: layer 2 tunelling protocol daemon
   Loaded: loaded (/etc/init.d/xl2tpd)
   Active: active (running) since Sat 2015-06-27 16:36:05 CEST; 35s ago
  Process: 1414 ExecStart=/etc/init.d/xl2tpd start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/xl2tpd.service
           └─1417 /usr/sbin/xl2tpd

Jun 27 16:36:05 l2tp-ipsec xl2tpd[1416]: setsockopt recvref[30]: Protocol not available
Jun 27 16:36:05 l2tp-ipsec xl2tpd[1416]: This binary does not support kernel L2TP.
Jun 27 16:36:05 l2tp-ipsec xl2tpd[1414]: Starting xl2tpd: xl2tpd.
Jun 27 16:36:05 l2tp-ipsec xl2tpd[1417]: xl2tpd version xl2tpd-1.3.6 started on l2tp-ipsec PID:1417
Jun 27 16:36:05 l2tp-ipsec xl2tpd[1417]: Written by Mark Spencer, Copyright (C) 1998, Adtran, Inc.
Jun 27 16:36:05 l2tp-ipsec xl2tpd[1417]: Forked by Scott Balmos and David Stipp, (C) 2001
Jun 27 16:36:05 l2tp-ipsec xl2tpd[1417]: Inherited by Jeff McAdams, (C) 2002
Jun 27 16:36:05 l2tp-ipsec xl2tpd[1417]: Forked again by Xelerance (www.xelerance.com) (C) 2006
Jun 27 16:36:05 l2tp-ipsec xl2tpd[1417]: Listening on IP address 10.10.1.5, port 1701

Package openswan is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Package 'openswan' has no installation candidate

OpwnsawnWiki wrote:To rebuild an openswan Debian package add a file openswan-srv.list containing the line:
deb-src http://ftp.debian.org/debian/ sid main
to your /etc/apt/sources.list.d directory, then call “apt-get update” and finally use “apt-get source openswan” to download the Debian source.