IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

[Users] Freeswan + IPTables Nat + Samba all on the same machine

From: Dustin Roberts (dustin_at_veltech.net)
Date: Thu Apr 25 2002 - 00:50:34 CEST


OK,
        Before I even get started I want you all to know that I had no
part in designing a system that would be a firewall and a samba server.
But try as I may they (clients) just don't seem to see anything wrong
with this. My situation is (or should) be rather simple. I have a home
dsl user that wants to connect to a windows network behind a Linux
server/firewall. Here is my setup

Windows Network(192.168.1.0/24)
                |
                |
                |
        -- NATed IP --
Linux (Samba fileserver / freeswan / iptables NAT)
        -- RealIP --
                |
                |
                |
        -- Internet --
                |
                |
                |
-- Client (RealIP) --

I am using the windows 2000 vpn tool (ipsec.exe) and have established
working connections. The issue is strange. After the VPN is activated
I can, from the client machine, ping the Linux server and the windows
network. I can even log into the windows domain (YAY!). However I
cannot access the samba shares that are on the Linux machine. I am able
to ssh and ping, but no samba? Does anyone have any ideas?

I have included my configurations below. Thanks.

###########################################
Linux Freeswan configuration:

config setup
        interfaces=%defaultroute
        klipsdebug=none
        plutodebug=none
        plutoload=%search
        plutostart=%search
        uniqueids=yes

conn %default
        keyingtries=1
        disablearrivalcheck=no
        left=216.43.110.129
        leftnexthop=216.43.110.134
        auto=add
        pfs=yes

conn rw
        right=%any
        authby=secret

conn rw-net
        leftsubnet=192.168.1.0/255.255.255.0
        right=%any
        authby=secret
############################################

############################################
Windows VPN tool configuration

conn rw-net
        left=%any
        right=216.43.110.129
        rightsubnet=192.168.1.0/24
        presharedkey="thisisnotmykey!"
        network=auto
        auto=start
        pfs=yes

conn rw
        left=%any
        right=216.43.110.129
        presharedkey="thisisnotmykey!"
        network=auto
        auto=start
        pfs=yes
############################################

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:53 CEST