[Shorewall-users] Opportunistic encryption

Tom Eastep
Thu, 31 Oct 2002 16:02:52 -0000

Homer Parker wrote:
> On Thu, 31 Oct 2002 06:26:25 -0800 Tom Eastep <teastep@shorewall.net>
> wrote....
>
>
>
>>No I won''t, but I''ll tell you to add an ipsec tunnel
entry in
>>/etc/shorewall/tunnels -- that produces the same rules.
>
>
> 	This is what has been in there all along:
>
> ipsec		net	0.0.0.0/0
>
> 	Like I said, normal IPSec tunnels work fine, but the OE one''s
don''t..
> Everything I find on the net for that error says it''s the firewall
:(
>

That seems to be a common problem -- if people can''t connect, it
obviously
has to be their firewall. Couldn''t be any of the other 100s of
components
in the network...

To remove Shorewall from the equation:

shorewall clear
iptables -t nat -A POSTROUTING -s <your internal net> \
-o <your external interface> -j MASQUERADE

Now test OE again.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net