Yes, the OpenSwan is mutch more clear, yuo have the packet with the originals ip in the nat post chain to the tunn0 device. Is there any chance to aplay NETMAP to the source ip on PREROUTING ? LALO On Tue, 2005-04-12 at 21:11 +0200, Daniel Lopes wrote: > Eduardo Spremolla schrieb: > > I have 2 local networks 10.2.2.0/24 and 10.37.130.0/24 interconnected by > > a ipsec tunnel running on kernel 2.6 native ipsec. So far so good. > > > > Now the admin of 10.37.130.0 wants me to NAT my network to 10.3.3.0 > > because he had a ip conflict. I cant SNAT because when the packet goes > > to nat post it has been encapsulated in ESP and had the firewalls > > address, as you can see in the bottom log snipe.I try to use NETMAP in > > mangle PREROUTING, but it changes the dest ip , not the source. > > > > Is this possible? > > > > Thanks in advance for any clue. > > > > LALO > > > According to http://www.shorewall.net/netmap.html, besides I donÂt > really know how and when NETMAP interacts, it should work if you use an > Interface for IPSec like the alternative IPSec stack implemented by > FreeS/WAN. For the native stack I donÂt know if it will work you will > need to know when it exactly interacts. It will probably only work when > implemented directly into the IPSec stack. > Este e-mail y cualquier posible archivo adjunto està dirigido Ãnicamente al destinatario del mensaje y contiene informaciÃn que puede ser confidencial. Si Ud. no es el destinatario correcto por favor notifique al remitente respondiendo este mensaje y elimine inmediatamente el e-mail y los posibles archivos adjuntos al mismo de su sistema. Està prohibida cualquier utilizaciÃn, difusiÃn o copia de este e-mail por cualquier persona o entidad que no sean las especÃficas destinatarias del mensaje. ANTEL no acepta ninguna responsabilidad con respecto a cualquier comunicaciÃn que haya sido emitida incumpliendo nuestra PolÃtica de Seguridad de la InformaciÃn. . . . . . . . . . This e-mail and any attachment is confidential and is intended solely for the addressee(s). If you are not intended recipient please inform the sender inmediately, answering this e-mail and delete it as well as the attached files. Any use, circulation or copy of this e-mail by any person or entity that not is the specific addressee(s) is prohibited. ANTEL is not responsible for any communication emitted without respecting our Information Security Policy.
