Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: iptables: User
RE: NAT rules for VPN only allowing one user?
 

Index | Next | Previous | View Flat


mmckeay at stillsecure

May 30, 2007, 9:12 AM


Views: 756
Permalink
RE: NAT rules for VPN only allowing one user? [In reply to]

I took a quick look at the user guide but didn't see a lot of
information on the VPN. Does Linksys have a forum or mailing list that
addresses this? Maybe someone there's run into a similar problem.


Martin McKeay, CISSP, GSNA
Cobia Product Evangelist
StillSecure
martin [at] stillsecure <mailto:mmckeay [at] stillsecure>
707-495-7926
http:// <http:///> www.cobiablog.com



________________________________

From: Neil Aggarwal [mailto:neil [at] JAMMConsulting]
Sent: Wednesday, May 30, 2007 9:23 AM
To: Martin McKeay; netfilter [at] lists
Subject: RE: NAT rules for VPN only allowing one user?



Martin:

I am using the LinkSys RV042:
http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=US
%2FLayout&cid=1123638171618&pagename=Linksys%2FCommon%2FVisitorWrapper&l
id=7161822279B01
<http://www.linksys.com/servlet/Satellite?c=L_Product_C2&childpagename=U
S%2FLayout&cid=1123638171618&pagename=Linksys%2FCommon%2FVisitorWrapper&
lid=7161822279B01>

Neil

--
Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com
FREE! Eliminate junk email and reclaim your inbox.
Visit http://www.spammilter.com <http://www.spammilter.com> for
details.


-----Original Message-----
From: netfilter-bounces [at] lists
[mailto:netfilter-bounces [at] lists
<mailto:netfilter-bounces [at] lists> ] On Behalf Of Martin
McKeay
Sent: Wednesday, May 30, 2007 10:17 AM
To: netfilter [at] lists
Subject: RE: NAT rules for VPN only allowing one user?

So this is a limitation of the Linksys router, correct? What are the
real requirements for user connections?

Linksys has the BEFVP41, that supports up to 50 VPN connections. Maybe
an upgrade to this box is in order. It's on Amazon for $99. What
router are you using right now? If it's a WRT54 series wireless router,
there might even be an image you can flash it with to do what you want
right now.

Martin


Martin McKeay, CISSP, GSNA
Product Evangelist
StillSecure
martin [at] stillsecure
707-495-7926
http://cobia.stillsecure.com/mckeay
<http://cobia.stillsecure.com/mckeay>

-----Original Message-----
From: netfilter-bounces [at] lists
[mailto:netfilter-bounces [at] lists
<mailto:netfilter-bounces [at] lists> ] On Behalf Of Michael
Gale
Sent: Wednesday, May 30, 2007 8:37 AM
To: Neil Aggarwal
Cc: netfilter [at] lists
Subject: Re: NAT rules for VPN only allowing one user?

Hey,

This sounds like a problem on the VPN gateway device, you should remove
the rule:

"/sbin/iptables -t nat -A POSTROUTING -o eth1
-d $LINKSYS_VPN_IP -p tcp --dport 1723
-j SNAT --to-source $ETH1_IP"

And resolve that issue, what is most likely currently happening. Your
VPN router is only setup for or only supports 1 VPN connection per IP
address. So a second connection would over write the first one.

Michael

Subject User Time
NAT rules for VPN only allowing one user? neil at JAMMConsulting May 29, 2007, 10:31 AM
    Re: NAT rules for VPN only allowing one user? jengelh at linux01 May 29, 2007, 11:12 AM
        RE: NAT rules for VPN only allowing one user? neil at JAMMConsulting May 29, 2007, 10:17 PM
            Re: NAT rules for VPN only allowing one user? michael.gale at pason May 30, 2007, 7:37 AM
                RE: NAT rules for VPN only allowing one user? mmckeay at stillsecure May 30, 2007, 8:16 AM
    RE: NAT rules for VPN only allowing one user? neil at JAMMConsulting May 30, 2007, 8:28 AM
    RE: NAT rules for VPN only allowing one user? mmckeay at stillsecure May 30, 2007, 9:12 AM
    Re: NAT rules for VPN only allowing one user? m at rtij May 30, 2007, 2:06 PM
        Re: NAT rules for VPN only allowing one user? gcarter at aesgi May 30, 2007, 5:24 PM
            RE: NAT rules for VPN only allowing one user? neil at JAMMConsulting May 30, 2007, 6:07 PM

  Index | Next | Previous | View Flat
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.