[Openswan Users] OpenSWAN VPN only kinda working

Paul Wouters paul at xelerance.com
Wed Jan 5 13:38:50 CET 2005


On Tue, 4 Jan 2005, Jeff Williams wrote:

> *nat
> -A POSTROUTING -o eth0 -j SNAT --to 207.164.133.170
> #-A POSTROUTING -o eth0 -j MASQUERADE
> -A PREROUTING -m tcp -p tcp -i eth0 --dport 993 -j DNAT --to-destination 
> 192.168.100.10

You are NAT'ing ipsec packets, causing them to be invalid and dropped?

And no, I have no idea why 'worked before' with freeswan, it shouldn't have.

Paul



More information about the Users mailing list