Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 24 Nov 2007 19:47:57 +1100
From:      Jerahmy Pocott <quakenet1@optusnet.com.au>
To:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Difficulties establishing VPN tunnel with IPNAT
Message-ID:  <7BB1A732-4F07-499E-A183-22776FEEEE90@optusnet.com.au>

next in thread | raw e-mail | index | archive | help
Hello,

I recently decided to give ipf and ipnat a try, previously I had  
always been using
ipfw and natd. Since switching over I can no longer establish a VPN  
tunnel from
any system behind the gateway.

I did 'ipf -F a' to flush all rules but I was still unable to connect  
so I think it's a problem
with ipnat? Also my redirect from ipnat doesn't seem to work either.

These are the only ipnat rules I have:

(fxp1 is the external interface)

# ipnat built in ftp proxy rules
map fxp1 10.0.0.0/24 -> 0/32 proxy port 21 ftp/tcp
map fxp1 0.0.0.0/0   -> 0/32 proxy port 21 ftp/tcp

# CVS Server on Fileserv
rdr fxp1 0/32 port 2401 -> 10.0.0.2 port 2401 tcp/udp

# nat all out going traffic on fxp1 from internal lan
map fxp1 10.0.0.0/24 -> 0/32


I can post my firewall rules too if that would help, however with NO  
rules set it
still didn't work so I don't think that would help.. (I'm using the  
klm which is default
to accept?)

Thanks!
J.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?7BB1A732-4F07-499E-A183-22776FEEEE90>