VPN filter not avaliable in community endian(feature later
versions:http://bugs.endian.it/view.php?id=834),
but i solved with two endian without extra hacking.. i use endian 2.2rc1
EFW2(second endian) in DMZ(i have vmware server in dmz so its easy deploy new
VM)
EFW1 portforward vpn UDP port to EFW2(to RED).
ip settings example:
EFW1 GREEN/LAN:192.168.0.1/24
ORANGE/DMZ:172.16.1/24;10.10.10.1/24
EFW2 RED:172.16.0.2/24
GREEN:10.10.10.2/24
vpn client use 10.10.10.100 -200 address
in EFW2 modify: /etc/openvpn/openvpn.conf.tmpl
push "route-gateway 10.10.10.1"
push "route 192.168.1.0 255.255.255.0"
and now you can controlled vpn traffic on EFW1:
source:10.10.10.x destination: blah blah..
not a best solutions, but working.
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user
