Re: Shorewall VPN configuration

Tom Eastep
Wed, 30 Jun 2004 21:01:31 -0000

Shorewall Admin User wrote:
> Hello All,
>
> I am needing some direction on configuring my firewall to allow access
> for VPN, openswan.  The openswan ipsec is running on one of my systems
> that are in the DMZ, which I use Proxy-ARP to get access to since I have
> extra static IP addresses.  I am new to shorewall and to openswan but I
> have both of them configured and running, but I am unable to get a
> connection from my laptop to my server that is running ipsec.
>
> My question is.... on the firewall what do I need to allow ipsec traffic
> to pass onto the vpn (openswan server)  Do I need an entry in the zones
> file, if so, what do I put there, also what do I need in the rules file
> to pass that traffic onto the vpn server.
>

http://shorewall.net/VPN.htm

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net