[Openswan Users] firewalling
paul at xelerance.com
Fri Nov 10 18:22:39 EST 2006
On Thu, 9 Nov 2006, Mark Olliver wrote:
> I have a firewall which is stuck allowing packets back into it.
> It can send out ESP packets and see them come back in however they never
> make it between eth1 and ipsec0.
> Host A behind firewall A can send a ping request to Host B it replies but
> the reply never gets back to Firewall A's ipsec0 interface it does leave
> Firewall B's server.
run ipsec verify. most likely you have not enabled forwarding.
Building and integrating Virtual Private Networks with Openswan:
More information about the Users