Firewall Configuration for IPSec

Firewall Configuration for IPSec

Post by Y. T. Cho » Sun, 27 May 2001 18:21:14



I have IPSec running on my FreeBSD gateway.  It works fine using NAT
without a firewall.  I'd like to use my firewall but haven't figured out
the entries I need to enable the following:

- Allowing UDP on port 500 (isakmp key management)
- Allowing protocol 50 to pass (IPSec payload encryption)
- Allowing protocol 51 to pass (IPSec authentication headers)

What's the syntax when using ipfw to enable the above?  Thanks.

 
 
 

Firewall Configuration for IPSec

Post by Dan Luke » Wed, 30 May 2001 08:40:30



> I have IPSec running on my FreeBSD gateway.  It works fine using NAT
> without a firewall.  I'd like to use my firewall but haven't figured out
> the entries I need to enable the following:

> - Allowing UDP on port 500 (isakmp key management)
> - Allowing protocol 50 to pass (IPSec payload encryption)
> - Allowing protocol 51 to pass (IPSec authentication headers)

> What's the syntax when using ipfw to enable the above?  Thanks.

$fwcmd add pass  udp     from ... 500 to ... 500 ...
$fwcmd add allow esp     from ...     to ... ...
$fwcmd add allow ah      from ...     to ... ...

                                        Dan

--
Dan Lukes            tel: +420 2 21914205, fax: +420 2 21914206
root of FIONet, KolejNET, webmaster of info.nic.cz, www.freebsd.cz


 
 
 

1. Firewall within a Firewall configuration

I've got a small LAN connected to a firewall that works properly
when connected to a provider using PPP.  Now I want to connect
to a WAN that has its own firewall to the internet.  My local firewall
can get through the internet, but everything on the local  LAN behind
my
local firewall cannot get
to the internet.

I'm using socks4.2 beta.  
--
Brian Michalk   |No, the  |AWPI, home of *the* online magazine about Austin.

2. How do I call my own system calls..

3. URGENT: IPSEC configuration

4. var deleted under veritas

5. IPSec Tunnel Configuration

6. Databases for Linux?

7. iptables for IPSec (Cisco VPN) - where can I find a sample configuration?

8. Vim

9. ipsec configuration

10. SSH and IPSec Configuration on Solaris 9

11. iptables for IPSec (Cisco VPN) - where can I find a sample configuration?

12. Problem of configuration of Freeswan IPSec VPN

13. ipsec configuration