Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-03-12 Thread Bob Proulx
Tom Roche wrote: 1. Several years ago (when I was first struggling with getting the F5NAP to work directly[6]), I tried to find a headless alternative (e.g., something like a NetworkManager plugin), but was told by F5 that there was no such client for linux (at least, with the make/model of

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-23 Thread Tom Roche
Back to this task after long detours! well, almost: Matt Ventura Fri, 23 Jan 2015 12:47:21 -0800 [1] The F5 VPN is throwing its default route over the original one, and that's causing traffic to the OpenVPN server to try to route over the F5 VPN. Obviously this doesn't work because the

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-22 Thread Matt Ventura
On 1/22/2015 9:43 AM, Tom Roche wrote: summary: Smells like progress! If I'm guessing correctly, the `route` changes imposed by connecting to the F5VPN[3] are conflicting with my server/jumpbox's current `iptables` (through which my client seeks to tunnel[7]. Does that claim seem warranted?

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-22 Thread Tom Roche
Tom Roche Thu, 22 Jan 2015 12:43:17 -0500 [1] summary: Smells like progress! If I'm guessing correctly, the `route` changes imposed by connecting to the F5VPN[2] are conflicting with my server/jumpbox's current `iptables`[3] (through which my client seeks to tunnel[4]). Does that claim seem

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-22 Thread Tom Roche
summary: Smells like progress! If I'm guessing correctly, the `route` changes imposed by connecting to the F5VPN[3] are conflicting with my server/jumpbox's current `iptables` (through which my client seeks to tunnel[7]. Does that claim seem warranted? If so, how to fix the server firewall?

network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-21 Thread Tom Roche
[note: following contains ASCII art in the middle, and footnoted links at the end] summary: I need to tunnel one SSL VPN (F5, running on one debian host) through another (OpenVPN, running on another debian host), but lose networking (e.g., `ping`) after the F5 VPN connects. I'm not sure

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-21 Thread Matt Ventura
On 1/21/2015 9:50 AM, Tom Roche wrote: [note: following contains ASCII art in the middle, and footnoted links at the end] summary: I need to tunnel one SSL VPN (F5, running on one debian host) through another (OpenVPN, running on another debian host), but lose networking (e.g., `ping`) after

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-21 Thread Tom Roche
Tom Roche Wed, 21 Jan 2015 12:50:04 -0500 [1] I need to tunnel one SSL VPN (F5, running on one debian host) through another (OpenVPN, running on another debian host), but lose networking (e.g., `ping`) after the F5 VPN connects. I'm not sure whether this is due to my firewall/iptables or VPN

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-21 Thread Matt Ventura
On 1/21/2015 1:33 PM, Tom Roche wrote: Tom Roche Wed, 21 Jan 2015 12:50:04 -0500 [1] I need to tunnel one SSL VPN (F5, running on one debian host) through another (OpenVPN, running on another debian host), but lose networking (e.g., `ping`) after the F5 VPN connects. I'm not sure whether this