Shorewall users - Apr 2013 - How to make internal NAT

Hi every one, i have installed Openvpn and shorewall, lastest versions, and
all is working fine. It''s gratefully to configure access with
shorewall.

I have a cuestion that i don`t know how to solve. I have a eth8 (
192.168.3.77/24) in my fw linux box where i have installed Openvpn and
Shorewall,  and i want to configure that openvpn clients (10.100.2.x/24)
 make nat with (192.168.3.77/24) when they go thru 192.168.3.x internal LAN
networh. What i want is to get the vpn clients make nat with 192.168.3.x
 eth8 when they access to devices/computers  after 192.168.3.x network.

I think perhaps is a rule, a masq to include ...??? I have tried several
but i don´t know how to do.

Please, can you tell me how configure rules, masq, to make internal NAT.???

Thank you in advance.


------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter

On Tue, Apr 09, 2013 at 03:46:29PM +0200, Javier Martinez
wrote:
>    Hi every one, i have installed Openvpn�and�shorewall, lastest versions,
>    and all is working fine. It''s gratefully to configure access
with
>    shorewall.�
>    I have a cuestion that i don`t know how to solve. I have a eth8
>    ([1]192.168.3.77/24) in my fw linux box where i have installed Openvpn
and
>    Shorewall, �and i want to configure that openvpn clients (10.100.2.x/24)
>    �make nat with ([2]192.168.3.77/24) when they go thru 192.168.3.x
internal
>    LAN networh. What i want is to get the vpn clients make nat with
>    192.168.3.x �eth8 when they access to devices/computers �after
192.168.3.x
>    network.
>    I think�perhaps�is a rule, a masq to include ...??? I have tried several
>    but i don�t know how to do.
>    Please, can you tell me how configure rules, masq, to make internal
>    NAT.???
Javier,

Have you read the Shorewall OpenVPN documentation?

http://www.shorewall.net/OPENVPN.html

As to your specific question, you can handle that configuration with
either NAT or routing.  If you choose NAT, then masq is the right place.
However, depending on what services on the LAN you want to make
available to the VPN clients, routing may be a better option.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com


------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter