Problem with NAT and ipsec (freeswan)

Jason Opperisano opie at 817west.com
Sun Oct 31 19:47:19 CET 2004


On Fri, 2004-10-29 at 15:49, netfilter at lgh3812534.vittran.norrnod.se
wrote:
> I have a linux box (redhat 9.0) that I want to use for NAT and VPN tunnel.
> The netfilter setup is very simple, just this line:
> iptables -t nat -A POSTROUTING -s 192.168.167.0/24 -o eth1 -j
> SNAT --to my_external_ip
> 
> Everyting works fine and the linux box does nat for internal subnet. But
> when I start ipsec (freeswan) (service ipsec start) nat stops forwarding
> packets.
> 
> Any tips?

there's a problem with your ipsec.conf.

-j

--
"What's the point of going out, we're just going to end up back
here anyway?"
	--The Simpsons




More information about the netfilter mailing list