From: info_at_radiomensajes.com.co
Date: Mon Dec 16 2002 - 21:10:26 CET
hello, i have a problem with my freeswan, i start it but after some time it falls, i did a tcpdump of mi ipsec0 and it shows packets going thru it but never get a response.
it looks like a problem in the re-keying, some how the negociation does not complete and the vpn falls.
other thing i want to ask is this chain:
i have this:
Chain POSTROUTING (policy ACCEPT 22057 packets, 1718K bytes)
pkts bytes target prot opt in out source destination
22053 1011K SNAT all -- * eth0 10.144.0.0/19 0.0.0.0/0 to:200.68.135.62
and i want to change it to (as sam advise me):
iptables -t nat -A SNAT -o eth0 -s 10.144.0.0/19 -d !192.168.100.0/24 -j --to 200.68.135.62
becouse packets in the vpn doesn't need snat, it is ok? or i'm wrong??
i attach the barf file
thanks
Rodrigo
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Tue Dec 17 2002 - 05:21:05 CET