Maciej Żenczykowski wrote: > This seems very decent now! Thanks :) > >> Looks like if I drop these it won't work. So I changed it to just catch >> packets coming from the cisco pix public IP at the other end: > > > weird protocol 50 and 51 are theoretically ipv6 related, oh well Found that port 50 is for IPSEC ESP and 51 AH - http://openskills.info/infobox.php?ID=1291 good to know > > this next one could probably also contain a "-o $VIRTUALVPNINTERFACE" I did try to use -o ipsec0 and it works, but where is this ipsec0 device? Is this set in the ipsec.conf - interface="ipsec0=eth0"? nevermind >> $IPTABLES -t nat -A POSTROUTING -s $INTNET -d $FBCMEDIA -j ACCEPT > > > and that's about it - seems real nice now. Yes, the two networks can talk, only the vpn server itself is not reacheable from the remote network. I red somewhere about this (too much googling :) ) so hopefully I'll fix it. > > (now to get my own centos4-centos4 VPN working...) > Cheers, > MaZe. > Have a nice day