Costantino
2005-Nov-04 14:24 UTC
Issue with W2K roadwarrior access to resources outside the corporate LANs
I have setup OpenVPN to allow roadwarriors to access the corporate LAN,
which they do.
For security, OpenVPN is configured to force using the VPN for all NET
accesses.
While the access to corporate LANs is OK, a roadwarrior does not manage
to access any site on the Internet, whether by ICMP or http.
Nothing related, that I can see, is logged in the log.
Can somebody shed some light for me, pls.
Thanks,
Costantino.
Attachment: zip file of shorewall status after few seconds from attempting
to access MSN web site.
Costantino
2005-Nov-04 15:48 UTC
RE: Issue with W2K roadwarrior access to resources outside the corporate LANs
Indeed I had forgotten to masquerade the tunnel interface.
Costantino.
-----Original Message-----
From: shorewall-users-admin@lists.sourceforge.net
[mailto:shorewall-users-admin@lists.sourceforge.net]On Behalf Of
Costantino
Sent: 04 November 2005 15:24
To: Shorewall Users
Subject: [Shorewall-users] Issue with W2K roadwarrior access to
resources outside the corporate LANs
I have setup OpenVPN to allow roadwarriors to access the corporate LAN,
which they do.
For security, OpenVPN is configured to force using the VPN for all NET
accesses.
While the access to corporate LANs is OK, a roadwarrior does not manage
to access any site on the Internet, whether by ICMP or http.
Nothing related, that I can see, is logged in the log.
Can somebody shed some light for me, pls.
Thanks,
Costantino.
Attachment: zip file of shorewall status after few seconds from attempting
to access MSN web site.
___________________________________________________________
To help you stay safe and secure online, we''ve developed the all new
Yahoo! Security Centre. http://uk.security.yahoo.com
-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache''s Geronimo App Server.
Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php