[Openswan Users]

[James Moore]

Hi!

Frederico Madeira wrote:
> 
> I need to make other vpn connnection with other custommer, so i add
> this line to my firewall:
> VPN1= 192.168.0.1/24
> VPN2= 192.168.0.2/24
> $IPTABLES -t nat -A POSTROUTING -o $TELEMAR_INTERFACE -d ! $VPN1 -j 
> MASQUERADE
> $IPTABLES -t nat -A POSTROUTING -o $TELEMAR_INTERFACE -d ! $VPN2 -j 
> MASQUERADE
>
In similar situations I've had luck with something like:
$IPTABLES -t nat -A POSTROUTING -o $TELEMAR_INTERFACE \
    -d $VPN1 -j RETURN
$IPTABLES -t nat -A POSTROUTING -o $TELEMAR_INTERFACE \
    -d $VPN2 -j RETURN
$IPTABLES -t nat -A POSTROUTING -o $TELEMAR_INTERFACE \
   -j MASQUERADE

-- 
James Moore
Palmetto IT Solutions
jmoore at palmettoitsolutions.com
803.238.3366