[Openswan Users] Routing over NAT

[Paul Wouters]

On Mon, 23 Oct 2006, Tobias Hadem wrote:

> >> To make it even more stranger, pinging and working from the IPCop-Side is
> >> working flawlessly, i can connect to any host inside the 172.50.0.0/16-space.
> >>
> >> anybody an idea?
> >>
> >
> > What is the problem you are trying to solve? What is NOT working?
> >
>
> sorry for the little bit confusing mail.
>
> the problem is, that i cannot reach any computer behind the
> ipcop-machine, and i think it is a routing problem, but don't get behind it.

Check forwarding, rp_filter, firewall settings. Run tcpdump on the inside
interface to watch the decrypted packet flow.

Paul