From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ralf Spenneberg Subject: Re: Routing a VPN.....confused Date: 14 Dec 2003 12:50:24 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1071402624.1682.6.camel@kermit> References: <1071368662.3630.37.camel@Psycho> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <1071368662.3630.37.camel@Psycho> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-8859-1" To: mbrei@carolina.rr.com Cc: Netfilter Am Son, 2003-12-14 um 03.24 schrieb Matt Brei: > Hi all, >=20 > I'm trying to set up a VPN with my buddy back in Chicago. We're both > using iptables to nat our Internet connection to the rest of the LAN and > filter out all the naughtiness on the cable modem connection. So far, > we've tried FreeS/WAN on the iptables routers, but as soon as we start > the ipsec service, it kills the Internet connection.=20 This sounds pretty much like a configuration issue using freeswan >=3D 2.0. FreeS/WAN enables opportunistic encryption (OE) by default. This may interrupt your Internet connections since it tries to encrypt everything by default. It uses policy groups for this. You probably have to disable these policy groups. Take a look at: http://www.freeswan.org/freeswan_trees/freeswan-2.04/doc/policygroups.html#= disable_policygroups Cheers, Ralf --=20 Ralf Spenneberg RHCE, RHCX Book: VPN mit Linux Book: Intrusion Detection f=FCr Linux Server http://www.spenneberg.com IPsec-Howto http://www.ipsec-howto.org Honeynet Project Mirror: http://honeynet.spenneberg.org