Hosting Provided By

[Users] updown script where firewall is not gateway

From: tim v. <prinski82(at)hotmail.com>
Date: Tue Apr 27 2004 - 08:43:58 EDT

Hello everyone,

I have a question concerning the use of an updown script that must dynamically add rules to the firewall (where the firewall is not on the same host as the freeswan module).

so my setup is:

roadWarrior - Internet - Firewall - Intranet

VPN gateway (freeswan)

so the gateway is on a dedicated interface on the firewall.

How can I do that?

At the moment I have a (dummy) netfilter firewall on the vpn gateway.

i can add rules to the dummy firewall on the same host via the updown script like you can see at the bottom of this mail, but my question is how to do that with the updown script to the firewall that is between the Internet and the intranet.

greetings,

Tim

up-client:)

# connection to my client subnet coming up

# If you are doing a custom version, firewall commands go here.

iptables -I FORWARD 1 -s $PLUTO_MY_CLIENT_NET/$PLUTO_MY_CLIENT_MASK \

-d $PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK -j ACCEPT

iptables -I FORWARD 1 -d $PLUTO_MY_CLIENT_NET/$PLUTO_MY_CLIENT_MASK \

-s $PLUTO_PEER_CLIENT_NET/$PLUTO_PEER_CLIENT_MASK -j ACCEPT

;;

Do you need help?