On 11/7/2013 6:59 AM, Tom Eastep wrote:
> On 11/6/2013 4:08 PM, Mark D. Montgomery II wrote:
>> Ok.
>> Connecting From (current remote location): 50.197.38.198
>> Connecting To (VPS): 173.255.225.115
>> Trying to Redirect to (Home/VPN Server): 98.239.173.35
>>
>> Shorewall started manually and dump run after I started the vpn trying
>> to connect.
>> Dump attached.
>>
> 
> Your /etc/shorewall/masq rule is wrong.
> 
> You want udp 1194 connection *to* 98.219.143.35 to have their source
> address rewritten as 173.255.225.115.
> 
> eth0:98.239.173.35    0.0.0.0/0       173.255.225.115

Or more restrictively:

eth0:98.239.173.35      0.0.0.0/0       173.255.225.115 udp     1194

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most 
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to