Re: [suse-security] Masquerading IPSec through SuSE firewall

Hey, Mark Tinka schrieb:

hi list...

i have a user with a VPN client, Checkpoint, using the IKE algorithm behind a SuSE 7.2 Pro system with a stock 2.2.19 kernel, being masqueraded to the net using ipchains....

... If i remember correctly, you can't use IPSec with masquerading, cause the IP Headers are changed in the masquerading and IPSec also sends a "checksum" which isn't o.k. after masquerading. But only my 2 cents. Torsten