Starting connections from firewall

Hi,

I've setup two IpCop boxes on two different LANs to create an ipsec
VPN. It works just fine: I can establish connections from hosts on
LAN1 to LAN2 and vice versa. One of the IpCops (called "lisa") has to
work as web proxy for the LAN, with LDAP authentication. It must hence
connect to the LDAP server on the other end of the VPN. The problem is
that lisa cannot establish connections through the VPN, nor can it
ping any host through the ipsec0 interface. This happens also in all
the other IpCop boxes I have, I guess it's a default iptables rule
given in the /etc/rc.d/rc.firewall. I'm pretty new to iptables (I'm
learning it these days) so I don't want to screw everything up by
touching the default conf (although I've tried commenting out
something with no luck).

The lines in /etc/rc.d/rc.firewall regarding this issue should be the
following ones

# trafic from ipsecX interfaces, before "-i GREEN_DEV" accept
everything
/sbin/iptables -N IPSECVIRTUAL
/sbin/iptables -A INPUT -j IPSECVIRTUAL
/sbin/iptables -A FORWARD -j IPSECVIRTUAL

I've also tried to enable logging issuing

iptables -A IPSECVIRTUAL -p all -j LOG --log-level debug --log-prefix
"IPSECVIRTUAL"

but it doesn't seem to log anything.

I really don't know what else to do except keep on studying netfilter,
but any help would be appreciated! :)

Thanks.

--
~matteo

.

Relevant Pages

  • Re: ids connections lost to vpn
    ... I was unable to connect to an IDS instance using "localhost" on Vista as it's ambiguous in the "hosts" file. ... Everything runs fine until I use the VPN to connect to a certain customer site. ... If I later disconnect from the VPN, all connections stop working and dbaccess stops connecting. ...
    (comp.databases.informix)
  • Re: Industry Standard Security and guest wifi access best practice
    ... with IPSEC VPN clients has not been positive. ... Then they probably won't support other forms of security. ... to switch all connections into SSL mode. ... Use WPA to encrypt wireless traffic, ...
    (alt.internet.wireless)
  • Re: VPN between office and Home
    ... Hard Drive as my second location backup for my SBS2003. ... On the XP box at home, go to Control Panel -> Network Connections. ... for my second location backup my main server files. ... That is why I want to get a VPN ternnel instead of client VPN or RWW. ...
    (microsoft.public.windows.server.sbs)
  • Re: DNS resolution order with multihomed host
    ... I'll try with the VPN ... >> public through Internet. ... > connections through PPTP are by private addresses and are encrypted. ... > need to be open for Active Directory. ...
    (microsoft.public.windows.server.dns)
  • Re: Connect two office buildings network together
    ... VPN is even slower because of the Protocol Overhead. ... DSL and/or CableTV Internet connections are usually asyncronous connections ... (different speeds in each direction) ... All the files are located in our main server. ...
    (microsoft.public.windows.server.networking)