Networking Forums

Networking Forums > Computer Networking > Linux Networking > iptables, FC6 and openswan

Reply
Thread Tools Display Modes

iptables, FC6 and openswan

 
 
news8080@yahoo.com
Guest
Posts: n/a

 
      12-22-2006, 02:17 PM
Fedora 6 running openswan.

I have ran into an interesting iptables problem. I'd like to source NAT
my external address to my internal address when it goes out to a
specific subnet. I guess this would be an easy source nat rule but here
is the catch, one address (My ipsec endpoint which is in the same
subnet on the other side has to be excluded), also I want the external
address to go out as itself when it goes to google etc (anything but
the external subnet)

iptables -t nat -A POSTROUTING -o ipsec0 -s 68.x.x.x -d 141.x.x.x/16 -
d !141.0.0.1/32 -j SNAT --to 192.168.50.1

I know this statement makes no sense since multiple -d are not allowed
but that is what I am looking for?

The reason behind this:
I have two ipsec endpoints (one at home and one at work) and while I
can get to each others encryption domains from behind respective
systems, i'd like to be able to do the same from the machine itself
too. And I want that connection to be encrypted.

anyone?

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
openswan pierre Linux Networking 0 02-27-2007 11:41 PM
openswan also= slebetman@yahoo.com Linux Networking 0 01-09-2007 08:51 AM
openswan Adam Linux Networking 2 05-23-2006 10:04 AM
openswan net-net-tunnel Jan Gosch Linux Networking 0 03-22-2006 02:03 PM
openswan vpn Luke Matthews Linux Networking 2 08-31-2004 07:32 PM



1 2 3 4 5 6 7 8 9 10 11