[COLUG] Questions about PopTop VPN configuration

[Mark L. Wise]

I have gotten my PopTop PC to Network VPN installed and running (sort 
of....)

Now I have a firestarter firewall problem....

The VPN works when the firewall is OFF.  When I bring up the firewall 
then I can no longer ping the remote ends of the PPP link.

I am attempting to add rules to the "user-pre" file to deal with this 
kind of traffic, but I am quite unsure of what kinds of packets and 
source and destination interfaces, etc....  Since I have the "real" 
(public) IP addresses on either side of the PPP link AND the private 
(internal) IP address of the PPP link, which interfaces, i.e. eth0 or 
ppp0 do I make rules for?  Or both?

What I do know is that if I use the client PC to ping a host on the 
other side of the link, the packets do get to the host and the host 
tries to reply, but the reply is somehow blocked...

netstat -n show the correct routing for the packets, both when the 
firewall is up or down.  The fact that the link works fine when the 
firewall is down tells me that it must be a firewall rule that is 
blocking the packet.

Anyone with any ideas out there?

Thanks!

Mark

-- 
Mark L. Wise

Alpha II Service, Inc.
1312 Epworth Ave
Reynoldsburg, Ohio 43068-2116
USA

Office: (614) 868-5033
Fax: (614) 868-1060
Email: mark at alpha2.com
WEB: www.alpha2.com