On Thu, Oct 21, 2004 at 08:01:15PM +0100, shore@xxxxxxx wrote: > Hi, > > I don't know how to start, so I'll just start by showing how my network is > build: > > > Internet > | > | > Cisco(800)(dsl modem/router) > 192.168.10.254 > | > | > 192.168.10.1(eth0) > Firewall > 192.168.0.50(eht1) > | > | > LAN 192.168.0.0/24 > > > The Cisco is controled by the ISP, so I can't change any configuration on it, > only if I ask them to. The Firewall is running squid also. > > The ISP configured the Cisco modem/router to accept VPN connections from the > internet with Cisco VPN client, and to attribute them a 10.0.0.0/8 range ip. > The problem is I can't access the LAN from the VPN clients. I'm not an iptables > master, but i've already searched everywhere for a solution and could't find > one. Mostly, I think, because I didn't want to get rid of my Firewall script, > it is doing a nice job so far. > > Thanks before i start parsing through 800 lines of firewall script, i gotta ask this first--when you connect with the cisco vpn client out on the internet--what shows up in the list of "secured routes?" is it 192.168.0.0/24? is it 0.0.0.0/0.0.0.0? or is it 192.168.10.0/24? -j -- Jason Opperisano <opie@xxxxxxxxxxx>