All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Emiel Mols" <emiel@fulgor-hosting.nl>
To: <netfilter-devel@lists.netfilter.org>
Subject: IPSEC and NAT
Date: Fri, 15 Oct 2004 20:00:07 +0200	[thread overview]
Message-ID: <E1CIWN8-0005Vo-00@deer.gmane.org> (raw)

Hi,

 

I've managed to setup a host-to-net ipsec connection with a remote network
on a linux router using (ported) isakmpd and kernel 2.6.8.1. However, I want
to be able to 'share' this ipsec connection with the rest of the network,
but since no ipsecn virtual interface is created in the 2.6 kernels I can't
use ordinary SNAT/MASQUERADE targets in iptables: ipsec packets get
encrypted before entering the POSTROUTING table :(, so the source address of
the encapsulated packet can't be changed anymore. I've read
http://lists.netfilter.org/pipermail/netfilter-devel/2004-January/thread.htm
l#13879, but the supplied patch doesn't work very well.

 

Does anyone have any suggestions on how to get this working?

 

Thanks in advance,

 

Emiel

             reply	other threads:[~2004-10-15 18:00 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-10-15 18:00 Emiel Mols [this message]
     [not found] <200410151800.i9FI09Mc018462@nmibwkms1.nexusmgmt.com>
2004-10-15 22:02 ` IPSEC and NAT John A. Sullivan III
2004-10-15 22:03   ` Emiel Mols
2004-10-16  1:18   ` Alexander Samad
     [not found] <200410152203.i9FM3kMc029703@nmibwkms1.nexusmgmt.com>
2004-10-16  2:09 ` John A. Sullivan III
2004-10-16  6:53   ` Emiel Mols
     [not found] <200410160653.i9G6rmMc025506@nmibwkms1.nexusmgmt.com>
2004-10-16 14:59 ` John A. Sullivan III

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=E1CIWN8-0005Vo-00@deer.gmane.org \
    --to=emiel@fulgor-hosting.nl \
    --cc=netfilter-devel@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.