From owner-freebsd-questions Wed Jan 17 21:15:13 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mail5.nc.rr.com (fe5.southeast.rr.com [24.93.67.52]) by hub.freebsd.org (Postfix) with ESMTP id 2CC3437B401 for ; Wed, 17 Jan 2001 21:14:56 -0800 (PST) Received: from babbleon.org ([24.163.43.236]) by mail5.nc.rr.com with Microsoft SMTPSVC(5.5.1877.537.53); Thu, 18 Jan 2001 00:14:48 -0500 Message-ID: <3A667B11.7BE15007@babbleon.org> Date: Thu, 18 Jan 2001 00:11:45 -0500 From: The Babbler Organization: None to speak of X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.15-4mdk i686) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: IPSEC tunneling Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I'm trying to get my FreeBSD gateway/firewall machine set up so that it will allow my wife's VPN access to work; this requires IPSEC packets to get through. Has anybody done this? Any helpful hints? I turned on the IPSEC and the tunneling options in the kernel, and I'm letting "esp" and "udp" packets through. (For now, I'm basically letting all of 'em through.) FWIW, I tried this in Linux and couldn't ever get it to work; this was a motivation for trying FreeBSD. It's still not working, but I can at least follow the network traffic better in FreeBSD, which at least let me fix my rules. (The rules I used under Linux were bad.) My gateway machine is multiplexing multiple internal-network machines to a single cable modem connection by using the command to translate packets. I suspect that something is going wrong there. [Sorry this is a little vague; for other reasons the machine isn't currently booted into FreeBSD so I can't double-check the precise settings at the moment.] -- "Brian, the man from babble-on" bts@babbleon.org Brian T. Schellenberger http://www.babbleon.org Support http://www.eff.org. Support decss defendents. Support http://www.programming-freedom.org. Boycott amazon.com. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message