Re: NAT does not allow for 1-to-1 port ranges?

2003-01-31 Thread Daniel Hartmeier
On Fri, Jan 31, 2003 at 12:43:50PM -0800, Cameron Lerch wrote: > nat on ne0 proto udp from 10.0.0.3/32 port 6000 to any -> ne0 port 6000 > nat on ne0 proto udp from 10.0.0.3/32 port 6001 to any -> ne0 port 6001 > > nat on ne0 proto udp from 10.0.0.3/32 port 6999 to any -> ne0 port 6999 > Is

Re: Qwest Contivity VPN Client Behind PF

2003-01-31 Thread jolan
On Fri, Jan 31, 2003 at 08:43:06AM -0500, Todd Chandler wrote: > When I attempt to connect from the client, it simply times out. Any > ideas what I'm missing? i assume the client is behind nat. if you're using 3.2, try this rule: nat on $ext_if inet proto udp from any port = isakmp to any -> \

Re: Qwest Contivity VPN Client Behind PF

2003-01-31 Thread Bryan Irvine
Qwest Contivity? hmm i know of the one from nortel networks. It's basically a layer 4 switch. Describe the setup a little more. Use ASCII art if necessary --Bryan On Fri, 2003-01-31 at 05:43, Todd Chandler wrote: > I have a user on my network that needs to use the Qwest Contivity VPN > Client

Qwest Contivity VPN Client Behind PF

2003-01-31 Thread Todd Chandler
I have a user on my network that needs to use the Qwest Contivity VPN Client to connect to a customer’s network.  I am having trouble getting the PF rules set up correctly to make this happen.  Does anyone have any experience getting the Contivity client to successfully connect through PF?