From: Chris Brenton <cbrenton@chrisbrenton.org>
To: patrick kuah <patrickkuah@msn.com>
Cc: netfilter@lists.netfilter.org
Subject: Re: VPN question
Date: 14 Oct 2003 06:44:27 -0400 [thread overview]
Message-ID: <1066128266.1322.2.camel@valhalla> (raw)
In-Reply-To: <BAY4-F28WaRIYvVjIUl0000bcc5@hotmail.com>
On Tue, 2003-10-14 at 06:19, patrick kuah wrote:
> Hi all,
>
> I have configured a SNAT rule in my iptables but after configuring, i can't
> VPN to my server which reside on another network.
Do you see this traffic being dropped by your logs?
> Do i need to add rule for VPN traffic to flow through the SNAT? If yes, what
> are the rule?
VPN is a generic term. What kind of VPN are you talking about? IPSec?
PPTP? SSL?
If you mean IPSec, you need to open UDP/500 to UDP/500 as well as
protocol 50. You also want to make sure that IPSec/IKE is only
negotiating ESP as a security service, not AH.
HTH,
C
next prev parent reply other threads:[~2003-10-14 10:44 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-10-14 10:19 VPN question patrick kuah
2003-10-14 10:44 ` Chris Brenton [this message]
-- strict thread matches above, loose matches on Subject: below --
2003-10-14 15:25 patrick kuah
2003-10-14 17:45 ` Chris Brenton
2004-08-15 14:59 SSH allow only form selected IP' luke
2004-08-16 11:23 ` James Turnbull
2004-08-16 13:37 ` Re[2]: " Kev
2004-08-16 16:30 ` VPN question Tony Gogoi
2004-08-16 17:29 ` Adam Lang
2004-08-16 18:50 ` Tony Gogoi
2004-08-16 18:59 ` Adam Lang
2004-08-17 8:51 urgrue
2004-08-17 12:55 ` Adam Lang
2004-08-20 1:42 ` Michael H. Warfield
2004-09-22 13:55 Tony Gogoi
2004-09-22 21:42 ` Tony Gogoi
2004-10-06 19:35 Sunny Shum
2004-10-06 19:58 ` Jason Opperisano
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1066128266.1322.2.camel@valhalla \
--to=cbrenton@chrisbrenton.org \
--cc=netfilter@lists.netfilter.org \
--cc=patrickkuah@msn.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.