-----BEGIN PGP SIGNED MESSAGE-----
This is a fairly complex issue with kernel dependencies. Take a look here:
www.cs.helsinki.fi/linux/linux-kernel/2001-15/0059.html
You cannot compile in connection tracking, or iptables, without disabling
ipchains because they are mutually exclusive; they can only be
made available for use in the same system if they are installed as modules.
You may be better off using the more robust packet filtering systems of
the 2.4.x kernel set. Take a look at ipmasq.cjb.net for more information
on masquerading in general in the various kernel sets.
Sam Sgro
sam_at_freeswan.org
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.
iQCVAwUBPN4cHUOSC4btEQUtAQGNawQA0MKH8UDlpp1f7uBUMwpC5GMMlkE0uEVh
/YeCupEuNAfDo1jN9CIiGfzzbRSHK8fJDLURieOHMtd6vAucwnkc+D1tTV7c8g9k
1+NIKTdYi+PLDtA73w7urbxg2uKvtIdH3+C+4i8TREeFogVtJphnTKycaXpRS8iU
DRmgZWw9gtw=
=HNXm
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:58 CEST