[Openswan Users] no l2tp traffic with NATed client

[Steffen Becker]

Hi,
 
> > For ref, the rule I'm using to forward traffic in to the 
> l2tp server is:
> > 
> > iptables -t nat -A PREROUTING -i eth0 -p udp --sport 1701 
> --dport 1701
> > -j DNAT --to-destination xxx.xxx.xxx.xxx

There is an error, you have to use the ipsec interface change "-i eth0" to
"-i ipsec0"
>From the cited HowTo:

# make VPN server reachable
/sbin/iptables -t nat -A PREROUTING -i ipsec0 \
	-p udp --sport 1701 --dport 1701 \
	-j DNAT --to-destination <address-of-VPN-server>

Cheers,
Steffen

------------------------------------------------------------------------
Dipl. Wirtsch. Inform. Steffen Becker, DFG Junior Research Group "Palladio",
Fk 2, Department of Computing Science, Software Engineering Group 
CvO Universität Oldenburg / OFFIS, Escherweg 2, D-26121 Oldenburg
Email: becker at informatik.uni-oldenburg.de
URL: http://se.informatik.uni-oldenburg.de
Voice: +49 441 9722-582 (-501, secr.) Fax: +49 441 9722-502
------------------------------------------------------------------------