Re: [cobalt-users] NAT Traversal for VPN

["Ian" <cobalt@xxxxxxxxxxxxx>]

On 20 Feb 2003 at 12:37, Peter Low wrote:

> We have a guest in our office who needs to have access to his company's 
> VPN.  We have a Qube doing NAT and DHCP.  Apparently, NAT and VPN don't mix.
> 
> Does anyone have any ideas on allowing our guest to get VPN access through 
> the NAT setup?  I've done some looking into NAT traversal, but have not 
> found specific directions.  Is it possible to do port forwarding or exclude 
> his port from NAT or something?
> 
> Thanks in advance for any help.
> 
> Peter

Hi,

We allow vpns through our IPTABLES firewall using these rules.  Maybe 
someone could translate them for the Qube ?

iptables -t nat -A PREROUTING -p tcp -i eth0 -d $EXTERNALIP --dport 
1723 -j DNAT --to $INTERNALIP:1723

iptables -t nat -A PREROUTING -p 47 -i eth0 -d$EXTERNALIP -j DNAT --
to $INTERNALIP

iptables -A FORWARD -p tcp -d $INTERNALIP --dport 1723 -j ACCEPT

iptables -A FORWARD -p 47 -d $INTERNALIP -j ACCEPT

iptables -t nat -A POSTROUTING -s $INTERNALIP -o eth0 -j SNAT --to
$EXTERNALIP

Regards

Ian
--