[Openswan Users] trying to bypass NAT for remote subnet across site-to-site VPN

[matt.bazan at comcast.net]

hi all - running ubuntu server.  have my site-to-site tunnel setup but cannot get the remote internal LAN to not be nat'd.

what's wrong with the entry i have (in before.rules)?:

-A POSTROUTING -s 192.168.10.0/24 -d \! 192.168.0.0/24 -o eth0 -j MASQUERADE

192.168.10.0/24 is leftside internal LAN.  192.168.0.0/24 is righthand internal LAN.  ufw fails to init when i load it w/ this rule.  thx-

-m