[ale] VPN (s are) hell

[James P. Kinney III]

I have a new VPN I'm setting up and it just isn't working right. I'm
sure its a firewall issue but I'm stumped.

It's a net-to-net setup using OpenSwan on the gateways. From one end on
the LAN, I can ping another machine on the other LAN by IP address.
However, I _can't_ ping back the other way which is why I think it's a
firewall issue. I can see the traffic moving with tcpdump running on
multiple interfaces. I can see the ESP packets leaving and returning to
the external interfaces and I can the the decrypted packets entering the
LAN interfaces. I did some ping size tests and can get a max MTU of
15236 which is bigger than normal.

I can't get jack else through the tunnel. No ssh, no http, no netbios,
no telnet, nada, bipcus. 

I set up a rule in iptables  on both ends to not NAT the traffic for the
other end (I don't expect I should be seeing any pings work otherwise).

I have both ends of the firewall so open I'm worried right now.

So I have developed a one way ping tunnel.  Argghhhhh.
-- 
James P. Kinney III          \Changing the mobile computing world/
CEO & Director of Engineering \          one Linux user         /
Local Net Solutions,LLC        \           at a time.          /
770-493-8244                    \.___________________________./
http://www.localnetsolutions.com

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part