iptables, FC6 and openswan

This is a discussion on iptables, FC6 and openswan within the Linux Security forums, part of the System Security and Security Related category; Fedora 6 running openswan. I have ran into an interesting iptables problem. I'd like to source NAT my external ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 12-22-2006
news8080@yahoo.com
 
Posts: n/a
Default iptables, FC6 and openswan

Fedora 6 running openswan.

I have ran into an interesting iptables problem. I'd like to source NAT
my external address to my internal address when it goes out to a
specific subnet. I guess this would be an easy source nat rule but here
is the catch, one address (My ipsec endpoint which is in the same
subnet on the other side has to be excluded), also I want the external
address to go out as itself when it goes to google etc (anything but
the external subnet)

iptables -t nat -A POSTROUTING -o ipsec0 -s 68.x.x.x -d 141.x.x.x/16 -
d !141.0.0.1/32 -j SNAT --to 192.168.50.1

I know this statement makes no sense since multiple -d are not allowed
but that is what I am looking for?

The reason behind this:
I have two ipsec endpoints (one at home and one at work) and while I
can get to each others encryption domains from behind respective
systems, i'd like to be able to do the same from the machine itself
too. And I want that connection to be encrypted.

anyone?

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:10 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0