On 06/05/07 15:15, Jorge Davila wrote:
I'm guessing that you can use the "normal" approach and apply the SNAT rules to the outgoing traffic flowing in the ipsec interfaces.
...
All traffic that pass the POSTROUTING chain in the NAT table is leaving the firewall box (through a physical interface e.g.:eth0 or through a virtual interface e.g.:ipsec0).
Um, correct me if I'm wrong, but not all IPSec implementations create an interface any more.
Grant. . . .
