Joshua Schmidlkofer wrote: > I am setting up an IPSec tunnel (ESP) between two networks. I can ping > the private side of the routers, from the routers, however, I can't get > anything else through. It's very strange. tcpdump shows traffic going > in the correct direction, but nothing get's out the internal network. > > > ## [Begin local tunnel: 10.1.1.0/24 ] ############ > spdadd 2.2.2.2 10.1.1.0/24 any -P in ipsec > esp/tunnel/2.2.2.2-5.5.5.5/require; > spdadd 10.1.1.0/24 2.2.2.2 any -P out ipsec > esp/tunnel/5.5.5.5-2.2.2.2/require; > ## [End ] ############ If you are running the 2.6.10 kernel, then you need ipsec-tools 0.5 and you need a -P fwd rule. See http://www.ipsec-howto.org/x277.html. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@xxxxxxxxxxxxx PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key - : send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
