I have users who need to run an IPSec VPN from a client through my RedHat Linux-based router, which is running a Shorewall firewall. The firewall is doing NAT. I have a single public IP address....
http://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Q_2358700...