Re: [ossig] Re: [myoss] Linux kernel IP stack, 7-layer OSI cake and SNAT shenanigans

[Christopher DeMarco <cdemarco@xxxxxxxxxxx>]

On Thu, Nov 04, 2004 at 11:13:23AM +0100, SianLun Lau wrote:

> the two networks *would* talk to each other as soon as you establish
> the  tunnel grom gw1  to gw2.   the routing  table would  be updated
> automatically   (at  least  with    FreeS/WAN     or  openswan    or
> strongswan). So once  tunnel is established,   you can see  that all
> traffic from one subnet is routed through the IPSEC interface.

> so in a  way, you don't  need NAT in  order to make the two networks
> realise each other's existance.

That's cute, I  didn't realize that.  But  the problem is that in this
case the other party we're connecting to is expecting  us to come from
the same network as  they're using -  and I don't intend to re-address
my network.  So the NAT requirement still stands.

No takers on whether I can do the NAT on  the same physical machine as
the IPsec?


-- 
% You are in a maze of twisty passages, all alike.
Christopher DeMarco <cdemarco@fastmail.fm>          
PGP public key ID 0x2E76CF5C @ pgp.mit.edu
+6012 232 2106


---------------------------------------------------------
To unsubscribe: send mail to ossig-request@mncc.com.my
with "unsubscribe ossig" in the body of the message