[Openswan Users] Routing all traffic through the ipsec tunnel

Paul Wouters paul at xelerance.com
Fri Feb 5 21:54:41 EST 2010


On Fri, 5 Feb 2010, Randy Wyatt wrote:

> Is there any primer to the necessary firewall rules? 

Apart from "don't NAT those packets" there is nothing much you need on
your firewall, if you allow proto 50 and UDP port 500/4500 traffic.

> If I set rightsubnet = 0.0.0.0/0, I don’t see any packets traverse the tunnel

That should work, perhaps you need to tell us more?

Paul


More information about the Users mailing list