Hi

I use shorewall 3.2.5 + ipsec (openswan 2.4.5) +fc6

I have used the method in http://www.shorewall.net/IPSEC.html for the
configuration.
(but not this method in http://www.shorewall.net/IPSEC-2.6.html !)

The tunnel is good established:
STATE_QUICK_R2: IPsec SA established {ESP=>0xf02417ee <0x068a61c6
xfrm=3DES_0-HMAC_MD5 IPCOMP=>0x00008997 <0x00000381 NATD=none DPD=none}

eth5 is ipsec0

but when client-lan1 will ping client-lan2 shorewall-lan1 say:
FORWARD:REJECT:IN=eth0 OUT=eth5 SRC=191.168.2.10 DST=10.71.60.6

191.168.2.10 is client-lan1

10.71.60.6 is client-lan2

Thanks

VUILLET Damien


Attachment: status.txt.gz
Description: GNU Zip compressed data

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to