Re: SNAT before IPSec

[Grant Taylor <gtaylor@riverviewtech.net>]

On 06/05/07 15:15, Jorge Davila wrote:
> I'm guessing that you can use the "normal" approach and apply the SNAT 
> rules to the outgoing traffic flowing in the ipsec interfaces.
...

> All traffic that pass the POSTROUTING chain in the NAT table is leaving 
> the firewall box (through a physical interface e.g.:eth0 or through a 
> virtual interface e.g.:ipsec0).
Um, correct me if I'm wrong, but not all IPSec implementations create an 
interface any more.


Grant. . . .