Re: Problem Found! - Firewall Rule

["John Paul" <john@pinoylinux.sytes.net>]

[-- Attachment #1: Type: text/plain, Size: 1904 bytes --]

Thanks George. I have modified my network to (10.10.0.0/24). 

Now, I'am able to ping the machines inside the network after connected to the VPN. The problem now is, I'm not able to map/see machines in Network Neighborhood except the VPN server.

Any clue?       


  ----- Original Message ----- 
  From: George Vieira 
  To: John Paul ; netfilter@lists.netfilter.org 
  Sent: Friday, June 06, 2003 8:56 AM
  Subject: RE: Problem Found! - Firewall Rule


  Your local IP is the same as the remote networks IP.. so how is the local machine to know that 192.168.0.55 or 66 or 32 is on the VPN!?

  The only way I know is to proxyarp the ppp device that the vpn is running on.. I'm assuming it's PPTP so you could try this command when the VPN comes up :
  echo 1 > /proc/sys/net/ipv4/conf/$VPNDEV/proxy_arp

  and this must be done on the VPN server too..
  I've never done it this way with a VPN.. but you can only try it..

  I'm surprised that anything really works properly the way you've done it because the firewall has 2 network devices with the same IP range.
  Thanks,


  ____________________________________________
  George Vieira
  Citadel Computer Systems Pty LtdSystems Managergeorgev AT citadelcomputer DOT com DOT au
  Citadel Computer Systems Pty Ltd
  Phone : +61 2 9955 2644HelpDesk: +61 2 9955 2698http://www.citadelcomputer.com.au


  -----Original Message-----
  From: John Paul [mailto:john@pinoylinux.sytes.net]
  Sent: Friday, June 06, 2003 9:56 AM
  To: netfilter@lists.netfilter.org
  Subject: Problem Found! - Firewall Rule


  Hello Folks, its me again :(

  Below is my config. My problem is, I can connect to VPN but for some reason, I cannot see machines inside the network after being connected. Can somebody give me the simpliest firewall rule on this? just for me to see the machines inside the network.

  Thanks!
  /JP


[-- Attachment #2: Type: text/html, Size: 7210 bytes --]