From: James P. Kinney III (jkinney_at_localnetsolutions.com)
Date: Tue Dec 17 2002 - 17:26:58 CET
Yes. The VPN box is the default gateway for the Samba box. From the VPN
box, I can't ping the win2k client, yet it can ping the VPN box and any
other machine inside the network. I tested this with the horrible
firewall rule of accept anything for INPUT and FORWARD and OUTPUT to or
from the ipsec+ interface and then I added the same for all interfaces.
On Tue, 2002-12-17 at 11:07, Cressatti, Dominique wrote:
> >> But I can't ping from the samba to the win2k machine.
> does the samba box has a route to your Linux VPN box?
> Usually I would make the VPN/firewall the default route.
>
> Dom
>
> -----Original Message-----
> From: James P. Kinney III [mailto:jkinney_at_localnetsolutions.com]
> Sent: 17 December 2002 15:44
> To: Cressatti, Dominique
> Cc: IPSEC
> Subject: RE: [Users] SMB through tunnel
>
>
> Hmmm. I get a "System error 51 has occurred." The remote computer is not
> available.
>
> It looks like samba is not available through the tunnel. The ping works
> from the win2k to the samba. But I can't ping from the samba to the
> win2k machine. The route seems to be only one way. There is a route
> listed in netstat for the win2k, but nothing gets to it.
>
> On Tue, 2002-12-17 at 10:04, Cressatti, Dominique wrote:
> > I've done at higher level subnet to subnet.
> > I think browsing can be bit tricky, even with
> > Windows client to windows VPN server browsing is
> > flacky, so I wouldn't try
> > Can you insteasted do something like:
> > net use <DriveLetter>: \\IPAddressOfSambaServer\ShareName /user:UserName
> >
> > Dom
> >
> > -----Original Message-----
> > From: James P. Kinney III [mailto:jkinney_at_localnetsolutions.com]
> > Sent: 17 December 2002 14:32
> > To: IPSEC
> > Subject: [Users] SMB through tunnel
> >
> >
> > I can ping from the roadwarrior Win2K through the tunnel to the gateway
> > and inside the private subnet. Now I'm trying to get windows browsing up
> > and running through the tunnel. I am explicitly allowing the passing of
> > port 137-8 for forwarding of smb datagrams. The Samba server inside the
> > private network is (supposedly) running as a WINS server. I have
> > specified that the WINS server IP in that of the private address for the
> > real Samba server. The Win2K still can't browse the workgroup. smbclient
> > can see the shares on the server from inside the private net (not
> > tunneled). I'm running out of documentation to read and it just isn't
> > doing what I need.
> >
> > The Samba server is set to be a PDC. All of my windows clients inside
> > the private net are virtual (vmware). I can't test the smbclient from
> > the roadwarrior linux partition as the laptop has a #*^! winmodem. (I'm
> > still looking for the dongle for the pc-card modem that work in Linux).
> >
> > Has someone successfully done a browse through a tunnel that would be
> > willing to document the step-by-step process? If it has already been
> > done, and I just haven't found it, could the link to it be posted
> > please?
> >
> > This is great technology. I'll be glad when I understand more of it.
-- James P. Kinney III \Changing the mobile computing world/ President and CEO \ one Linux user / Local Net Solutions,LLC \ at a time. / 770-493-8244 \.___________________________./ GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics) <jkinney_at_localnetsolutions.com> Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Wed Dec 18 2002 - 05:21:04 CET