From: Jason Opperisano <opie@817west.com>
To: netfilter@lists.netfilter.org
Subject: Re: Cisco VPN Client + Cisco 800 + Firewall
Date: Wed, 27 Oct 2004 16:15:04 -0400 [thread overview]
Message-ID: <20041027201504.GA1315@bender.817west.com> (raw)
In-Reply-To: <1098876234.mw0x4ye44eo@mail.sapo.pt>
On Wed, Oct 27, 2004 at 12:23:54PM +0100, shore@sapo.pt wrote:
>
>
> Anyone ??
>
not to over-simplify things, but where in your firewall rules do you
allow the VPN pool IP's (the 10.0.0.0/8) into your internal network?
also--while your script may be readable to you, it may be
incomprehensible to others--the preferred method of posting your rules
to this list is with the output of:
iptables -t mangle -vnxL && iptables -t nat -vnxL && iptables -vnxL
the other possible break in the chain is this: does the cisco 800 have
a static route on it along the lines of:
192.168.0.0/24 via 192.168.10.1
or are you relying on NAT to eliminate the need for routing?
you may also want to clue us in to what you testing methodology is (i.e.
what are you trying to connect to with the VPN client).
-j
--
Jason Opperisano <opie@817west.com>
prev parent reply other threads:[~2004-10-27 20:15 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-10-21 19:01 Cisco VPN Client + Cisco 800 + Firewall shore
2004-10-21 19:29 ` Jason Opperisano
2004-10-27 11:23 ` shore
2004-10-27 20:15 ` Jason Opperisano [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20041027201504.GA1315@bender.817west.com \
--to=opie@817west.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.