[no subject]

It's a net-to-net setup using OpenSwan on the gateways. From one end on
the LAN, I can ping another machine on the other LAN by IP address.
However, I _can't_ ping back the other way which is why I think it's a
firewall issue. I can see the traffic moving with tcpdump running on
multiple interfaces. I can see the ESP packets leaving and returning to
the external interfaces and I can the the decrypted packets entering the
LAN interfaces. I did some ping size tests and can get a max MTU of
15236 which is bigger than normal.

I can't get jack else through the tunnel. No ssh, no http, no netbios,
no telnet, nada, bipcus. 

I set up a rule in iptables  on both ends to not NAT the traffic for the
other end (I don't expect I should be seeing any pings work otherwise).

I have both ends of the firewall so open I'm worried right now.

So I have developed a one way ping tunnel.  Argghhhhh.
-- 
James P. Kinney III          \Changing the mobile computing world/
CEO & Director of Engineering \          one Linux user         /
Local Net Solutions,LLC        \           at a time.          /
770-493-8244                    \.___________________________./
<a  rel="nofollow" href="http://www.localnetsolutions.com";>http://www.localnetsolutions.com</a>

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
&lt;jkinney at localnetsolutions.com&gt;
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part



</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00048" href="msg00048.html">[ale] VPN (s are) hell</a></strong>
<ul><li><em>From:</em> Dow.Hurst at mindspring.com (Dow Hurst)</li></ul></li>
<li><strong><a name="00271" href="msg00271.html">[ale] VPN (s are) hell</a></strong>
<ul><li><em>From:</em> transam at verysecurelinux.com (Bob Toxen)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00046.html">[ale] Perplexed by bash</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00048.html">[ale] VPN (s are) hell</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00044.html">[ale] FAX service recommendation?</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00048.html">[ale] VPN (s are) hell</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00047"><strong>Date</strong></a></li>
<li><a href="threads.html#00047"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>