0
votes
1answer
90 views

SSH not working over IPSec tunnel (Strongswan)

I configured a small network on a cloud virtual machine. This virtual machine has a static IP address assigned to eth0 interface that I'll call $EXTIP. mydomain.com points to $EXTIP. Inside, I have ...
0
votes
2answers
95 views

Limit Privoxy access with iptables to IP range

I would like to limit the access of the Privoxy port to a selected IP range. Background: I'm using an IPSec-VPN which users get 10.0.0.0/8 addresses assigned and only those users should be able to use ...
1
vote
1answer
396 views

How do I allow only certain IPSet set's to access a certain port with iptables?

I'm using IPSet to build IP ranges for different countries as follows : # Canada ipset -F ca.zone ipset -N ca.zone nethash for IP in $(wget -O - http://www.ipdeny.com/ipblocks/data/countries/ca.zone) ...
1
vote
0answers
214 views

racoon pure IPSEC VPN, best way to give vpn server an IP address on the VPN?

We are testing a VPN server for DR. We have a rackspace cloud instance, with a pure IPSEC VPN server running in racoon, serving "road warrior" clients. We have some NAT going on on the server to route ...
0
votes
1answer
115 views

ipsec routing / strange routing behavior

I have following network configuration: Office1 <-- openvpn --> office2 <-- ipsec tunnel --> branch office Office1 and office2 are on Debian, Branch office: juniper srx100 Office1 ...
0
votes
1answer
227 views

IPSec VPN routing

This is supposed to be a pretty simple question but I couldn't google a answer for it! I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has ...
5
votes
1answer
743 views

With iptables, match packets arrived via IPSEC tunnel

I'm using IPSEC in a tunnel mode. How to make an iptables rule that will match only packets which arrived via IPSEC tunnel (i.e. after IPSEC decrypted them - not the IPSEC packets when they arrive ...
1
vote
2answers
1k views

How to access remote lan machines through a ipsec / xl2ptd vpn (maybe iptables related)

I’m trying to do the setup of a IPSEC / XL2TPD VPN for our office, and I’m having some problems accessing the remote local machines after connecting to the VPN. I can connect, and I can browse ...
0
votes
2answers
959 views

Which ports for IPSEC/LT2P?

I have a firewall/router (not doing NAT). I've googled and seen conflicting answers. It seems UDP 500 is the common one. But the others are confusing. 1701, 4500. And some say I need to also ...
1
vote
2answers
313 views

netfilter: How to mark packet by reqid?

I have the following problem. I have SAs that use firewall marks. So only packets that have that mark get encoded and decoded. I managed to set the mark for packets that shall be encoded but I cannot ...
2
votes
1answer
1k views

VPN iptables Forwarding: Net-to-net

I've tried to look elsewhere on this site but I couldn't find anything matching this problem. Right now I have an ipsec tunnel open between our local network and a remote network. Currently, the ...
-4
votes
4answers
304 views

NAT a private IP to a public IP

I have two servers A and B. Server A has a private ip 10.0.0.4 and a public ip of 1.2.3.4 Server B has a private ip 10.0.0.5 and a public ip of 5.6.7.8 running ifconfig on Server A says eth0 has ...
2
votes
1answer
891 views

Forward trafic from secure VPN (ipsec) to PPTP

I had configured my server (server1) to connect to another server(server2) over a VPN with IPsec (secure vpn). But now I need to setup another VPN (work vpn) so I will be able to connect to my ...
2
votes
1answer
1k views

SNAT through Racoon IPSec VPN

I am trying to route traffic from a device (that I will call "target") connected to my Ubuntu box (that I will call "host") to servers at a remote office. The host uses a Racoon IPSec VPN, connected ...
1
vote
1answer
835 views

How can I create a host to host IPsec VPN if my server has direct Internet access and no LAN?

I have a Linux server (CentOS 5.5) that has direct access to the Internet with a fixed IP address. That is, the IP address is 200.29.X.Y. The gateway was given by the datacenter (200.29.X.Z) and the ...
2
votes
1answer
10k views

iptables rules to allow L2TP/IPSEC VPN behind firewall

I asked about this on the Smoothwall Express forums but they are understandably reluctant to provide to much help. After all, they really want to sell the commercial version. I need to provide an ...
1
vote
2answers
6k views

PPTP/GRE Multi-forwarding NAT IPTables Example

Google is showing me some returns on PPTP/GRE NAT through iptables/netfilter that will allow multiple connections. However, I am not finding an example of using this pptp helper module that allows ...
3
votes
2answers
4k views

IPSec Tunnel to Amazon EC2 - Netkey, NAT, and routing issue

I'm working on getting an IPSec VPN working between Amazon EC2 and my on-premise. The goal is to be able to safely administer stuff, up/download data, etc. over that tunnel. I have gotten the tunnel ...