<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7226.0">
<TITLE>Re: [Openswan Users] Fedora Core 2</TITLE>
</HEAD>
<BODY>
<DIV id=idOWAReplyText69885 dir=ltr>
<DIV dir=ltr><FONT size=2>> Hi,<BR>><BR>> I installed fedora core 2 and
then went with openswan for my VPN<BR>> connection. I was able to reuse
my configuration files from freeswan<BR>> and this allowed me to connect
to/from my work (at least ping). I<BR>> send an e-mail to this list and
was given a response from Travis Groth<BR>> that I needed to add these lines
to my firewall configuration.<BR>><BR>> iptables -t nat -I POSTROUTING -o
$EXTIF -p esp -j ACCEPT<BR>> iptables -t nat -I POSTROUTING -o $EXTIF -p ah
-j ACCEPT<BR>><BR>> However, I am still stuck trying to get either
vncviewer or remote<BR>> desktop connection to work properly. In both
cases, I start to<BR>> connect to my workstation at work but nothing
further. Additionally,<BR>> I don't seem to be able to open an ftp
connection using my browser to<BR>> any public websites, e.g. <A
href="ftp://ftp.gnu.org">ftp://ftp.gnu.org</A>.<BR>><BR>> Any help would
be greatly appreciated (an ipsec barf follows).<BR>><BR>>
Richard<BR>></FONT></DIV>
<DIV dir=ltr><FONT size=2>>setenforce=0<BR>>or add what is needed to your
selinux policies.<BR>><BR>>Ted</FONT></DIV><FONT size=2></FONT></DIV>
<P><FONT size=2>When I do a getenforce on my system it returns "disabled".
Is setenforce=0 still needed?</FONT></P>
<P><FONT size=2>Richard</P>
<DIV dir=ltr><BR><BR></DIV></FONT>
</BODY>
</HTML>