Tagged Questions

0
votes
0answers
57 views

IPSec VPN routing

This is supposed to be a pretty simple question but I couldn't google a answer for it! I have a ipsec VPN tunnel established between 1.1.1.1 and 2.2.2.2 (public IPs). The first machine (1.1.1.1) has ...
3
votes
1answer
194 views

With iptables, match packets arrived via IPSEC tunnel

I'm using IPSEC in a tunnel mode. How to make an iptables rule that will match only packets which arrived via IPSEC tunnel (i.e. after IPSEC decrypted them - not the IPSEC packets when they arrive ...
1
vote
2answers
524 views

How to access remote lan machines through a ipsec / xl2ptd vpn (maybe iptables related)

I’m trying to do the setup of a IPSEC / XL2TPD VPN for our office, and I’m having some problems accessing the remote local machines after connecting to the VPN. I can connect, and I can browse ...
0
votes
1answer
205 views

Which ports for IPSEC/LT2P?

I have a firewall/router (not doing NAT). I've googled and seen conflicting answers. It seems UDP 500 is the common one. But the others are confusing. 1701, 4500. And some say I need to also ...
1
vote
1answer
170 views

netfilter: How to mark packet by reqid?

I have the following problem. I have SAs that use firewall marks. So only packets that have that mark get encoded and decoded. I managed to set the mark for packets that shall be encoded but I cannot ...
2
votes
1answer
805 views

VPN iptables Forwarding: Net-to-net

I've tried to look elsewhere on this site but I couldn't find anything matching this problem. Right now I have an ipsec tunnel open between our local network and a remote network. Currently, the ...
-4
votes
4answers
258 views

NAT a private IP to a public IP

I have two servers A and B. Server A has a private ip 10.0.0.4 and a public ip of 1.2.3.4 Server B has a private ip 10.0.0.5 and a public ip of 5.6.7.8 running ifconfig on Server A says eth0 has ...
2
votes
1answer
635 views

Forward trafic from secure VPN (ipsec) to PPTP

I had configured my server (server1) to connect to another server(server2) over a VPN with IPsec (secure vpn). But now I need to setup another VPN (work vpn) so I will be able to connect to my ...
2
votes
1answer
908 views

SNAT through Racoon IPSec VPN

I am trying to route traffic from a device (that I will call "target") connected to my Ubuntu box (that I will call "host") to servers at a remote office. The host uses a Racoon IPSec VPN, connected ...
1
vote
1answer
606 views

How can I create a host to host IPsec VPN if my server has direct Internet access and no LAN?

I have a Linux server (CentOS 5.5) that has direct access to the Internet with a fixed IP address. That is, the IP address is 200.29.X.Y. The gateway was given by the datacenter (200.29.X.Z) and the ...
1
vote
1answer
7k views

iptables rules to allow L2TP/IPSEC VPN behind firewall

I asked about this on the Smoothwall Express forums but they are understandably reluctant to provide to much help. After all, they really want to sell the commercial version. I need to provide an ...
1
vote
2answers
5k views

PPTP/GRE Multi-forwarding NAT IPTables Example

Google is showing me some returns on PPTP/GRE NAT through iptables/netfilter that will allow multiple connections. However, I am not finding an example of using this pptp helper module that allows ...
3
votes
2answers
4k views

IPSec Tunnel to Amazon EC2 - Netkey, NAT, and routing issue

I'm working on getting an IPSec VPN working between Amazon EC2 and my on-premise. The goal is to be able to safely administer stuff, up/download data, etc. over that tunnel. I have gotten the tunnel ...