[TriLUG] iptables and VPNs

[Tarus Balog]

Gang:

Anyone have experience fixing up VPN access through an iptables-based  
firewall? We have a linux box that acts like a router, and I was  
recently in need of a VPN connection through that firewall to a  
client's site. The VPN was by NORTEL, and I had to use the Contivity  
VPN client for Windows to access it. I *think* it was IKE based, but I  
am not even sure what that means (grin).

My connection would establish, but then I would start losing packets  
(verified by repeated pings) until nothing would go through, over the  
span of about five minutes. I moved my system outside the firewall and  
these problems went away.

Clues?

-T

________________________________________________________________________ 
___
Tarus Balog, OpenNMS Maintainer			Main:		+1 919 545 2553
Blast Internet Services, Inc.			Fax:			+1 503-961-7746
Email: tarus at opennms.org				URL: http://www2.blast.com/tarus
PGP Key Fingerprint: 8945 8521 9771 FEC9 5481  512B FECA 11D2 FD82 B45C