Yessir, I finally found this in the online docs at freeswan over the weekend.
Made the change to _updown and everythings cool.
This such a nice elegant solution to multiple router/connections, I think
I will write it up and send it to the group. It obviously has an application
without a VPN. I wonder if there is much performance penalty for
bidirectional masquerading?
"Charles Steinkuehler" <[EMAIL PROTECTED]> on 03/09/2002 04:59:55 PM
To: Phillip Watts/austin/Nlynx@Nlynx
cc: [EMAIL PROTECTED]
Subject: Re: [Leaf-user] vpn routing
This is done by the _updown script. You can either customize the _updown
script, or use [left|right]firewall=no in your ipsec.conf file, which will
also prevent holes from being automatically created for the protocol 50
traffic, so you'll have to explicitly allow that as well.
_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user