-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 4/21/20 4:01 PM, Gaétan QUENTIN wrote: > Hi, > > I don't see how. The rule should be applied only if destination is > in ppp0 ip routes . Masquerading works filtering source, not > destination. > > Or i am missing something. > You are missing the liklihood that hosts on the other end of the VPN don't know how to route to your local network. This can be remedied either by masquerading or by configuring an additional route on the other end of the VPN.
- -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster Shoreline, \ with an international standard? Washington, USA \ A: Someone who makes you an offer you http://shorewall.org \ can't understand \________________________________________ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCgAdFiEEFNMNR63CLO6yqbL8luaz8kI6TRAFAl6fhxYACgkQluaz8kI6 TRAkVA/+K6FHyd0PlUi5jvm6GqKC8hGxYfgk9NuIdXbByw8x3X1mPYfVvrZ3Vq7a LeSQpNj6DWWxASSbYcZoCf2qhDiNLBkIR+WQwDDf5phvVRcEz7qz/QsejM4oRGIb 5+nxowDSKbDsFPZ4Cy/p1x6PtVuDB+huiXTqgxm4ip+jUvtLw5ChFTZcu8Z8Yfi9 xUVoZkhErieyznUqktKQZKoj3BGNPT72BBJRsBfP82dfHC/Rws2w8pQ95U8tMxu7 BuYXrvM+ePiqtegVxUt4mzTb51YbWu80i2nMITeK8k+vqfIYFLJfaiknr+0UfEYp yWdGs+Xx+UbCp/T/fvJyBs0K3S1OVQLPsYzBCL6Gs97OeKICHECbKhGjkGlIXeVt 8q6RNQoPvvXqW1Ur7797GVx27nnfp3jgTA2/w4Vj3sHi4FSu06KRpPD+7OGNP3RN fF6Vfp5OLkSG4VsTu+OgMaYJ6U5PwMicU+NMUBeX7bnxigL8hwOpeMj81hd5A/oW y7sm4urXSasgVIml6X/2QTjWQewQ6ntFLnxMPzTFp37JLwxbdpF92MQ+2mF0SczG 6c+ybrf0OzGDVSkUEiBGvh5fULgovNxNQ+xDCXsejLAVDbJHsF81id3pF2DHLykx vn3jc7YkVTgQCj6BVk/PaleRJeGM7ZH+So/2/LXAr0S+snUGX/s= =ZQjA -----END PGP SIGNATURE----- _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
