[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1143
  • Last Modified:

shorewall vpn bridge

Im running Ubuntu 7.1 with Shorewall as a router/firewall for my home network.

 I have pptp client configured to connect to my office.  From the ubuntu desktop I can browse shares etc.
From other computers in the LAN I can't browse or ping anything on the office LAN.


I assume this is because shorewall is not configured to bridge the interfaces.  ppp0 and eth11(my LAN nic which hands out DHCP leases)

I am configureing shorewall via webmin.

thanks
0
livegirllove
Asked:
livegirllove
1 Solution
 
WizRd-LinuxCommented:
If your server is making the connection then you will be able to forward the packets through, however keep in mind that the clients will not know or understand the remote lan or how to resolve addresses.

say you home lan is 10.0.0.0/24 and you office lan is 192.168.0.0/24.  When a client on your home lan tries to access 192.168.0.1 it will forward the packet to your shorewall box and it should then in turn forward the packets to the vpn concentrator.

If you try to resolve main.office.local (assuming this is 192.168.0.1), your client will be unable to locate the dns server that provides the resolution for main.office.local, hence will never know that it is 192.168.0.1.

Everything you do will have to occur via IP addresses unless you specify the DNS server of your company on the clients.
0
 
livegirlloveAuthor Commented:
wow, i am sorry i missed your reply.

I would be ok  routing based on IP address.  But I have BIND9 on the ubuntu server and its working.  Can I set it to use my office dns server as a forwarder so I can resolve office names from a home client?  But still only route names that resolve to the office through the VPN.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now