From owner-freebsd-security  Thu Jan 24 11:46: 4 2002
Delivered-To: freebsd-security@freebsd.org
Received: from veldy.net (veldy-host33.dsl.visi.com [209.98.200.33])
	by hub.freebsd.org (Postfix) with ESMTP id 056AD37B400
	for <freebsd-security@freebsd.org>; Thu, 24 Jan 2002 11:46:00 -0800 (PST)
Received: from HP2500B (localhost.veldy.net [127.0.0.1])
	by veldy.net (Postfix) with SMTP
	id 4E76B1A01F; Thu, 24 Jan 2002 13:45:58 -0600 (CST)
Message-ID: <007001c1a50f$79c2b320$3028680a@tgt.com>
From: "Thomas T. Veldhouse" <veldy@veldy.net>
To: "Lawrence Sica" <lomifeh@hotmail.com>, <anderson@centtech.com>,
	"dr3node" <rtfm@webburo.ru>
Cc: <freebsd-security@freebsd.org>
References: <200201241847.AHX10883@vmms1.verisignmail.com> <3C50588C.7200324B@centtech.com> <OE255XsCj1d4vJFRFWM0001c144@hotmail.com>
Subject: Re: Can't set up an IPsec tunnel.
Date: Thu, 24 Jan 2002 13:44:01 -0600
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

And opening up 500/udp

Tom Veldhouse

----- Original Message -----
From: "Lawrence Sica" <lomifeh@hotmail.com>
To: <anderson@centtech.com>; "dr3node" <rtfm@webburo.ru>
Cc: <freebsd-security@freebsd.org>
Sent: Thursday, January 24, 2002 1:06 PM
Subject: Re: Can't set up an IPsec tunnel.


>
> ----- Original Message -----
> From: "Eric Anderson" <anderson@centtech.com>
> To: "dr3node" <rtfm@webburo.ru>
> Cc: <freebsd-security@freebsd.org>
> Sent: Thursday, January 24, 2002 10:55 AM
> Subject: Re: Can't set up an IPsec tunnel.
>
>
> > IPSEC won't work through masquarading boxes or NAT firewalls.
> >
>
> you have to do lan-to-lan tunneling to get it to work.  It will work i
have
> done it.  Big thing is allowing the firewall to pass esp.
>
> --Larry
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message