[LARTC] custom route for forwarded traffic

[Aleksander Kamenik <aleksander@krediidiinfo.ee>]

Hi,


I have two networks, users and servers connected via vpn (ipsec). Both 
internal networks. The routing is fine and connections work both ways.

Accordingly both networks have a firewall each which faces the internet 
and they create the vpn link between each other. Both firewalls have 
only one external IP (if they had more, I wouldn't be asking).

The servers network's firewall however does DNAT too. This is for 
external clients who connect to the external IP of the firewall and so 
can connect to the internal mail and webserver.

I want the computers in the users network to connect to the external IP 
of the servers firewall AND have the connection go through the VPN.

If I add a rule to the main routing table in the users network's 
firewall for servers network's external IP to go through the VPN, I will 
break the VPN connection (kind of like the chicken and egg problem).

So I need to create a route, which will apply only for forwarded 
connections. How do I do that?


Thanks,

-- 
Aleksander Kamenik
system administrator
+372 6659 649
aleksander@krediidiinfo.ee

Krediidiinfo AS
http://www.krediidiinfo.ee/
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc