Hi,
I have two networks, users and servers connected via vpn (ipsec). Both
internal networks. The routing is fine and connections work both ways.
Accordingly both networks have a firewall each which faces the internet
and they create the vpn link between each other. Both firewalls have
only one external IP (if they had more, I wouldn't be asking).
The servers network's firewall however does DNAT too. This is for
external clients who connect to the external IP of the firewall and so
can connect to the internal mail and webserver.
I want the computers in the users network to connect to the external IP
of the servers firewall AND have the connection go through the VPN.
If I add a rule to the main routing table in the users network's
firewall for servers network's external IP to go through the VPN, I will
break the VPN connection (kind of like the chicken and egg problem).
So I need to create a route, which will apply only for forwarded
connections. How do I do that?
Thanks,
--
Aleksander Kamenik
system administrator
+372 6659 649
aleksander@xxxxxxxxxxxxxxx
Krediidiinfo AS
http://www.krediidiinfo.ee/
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
