Re: IPsec gateway - Shorewall - 1to1 NAT

Rich Goodwin via Shorewall-users <[email protected]> Mon, 14 Apr 2025 19:59:17 -0500
Newsgroups gmane.comp.security.shorewall
Message-ID <[email protected]>
SSBiZWxpZXZlIEkgaGF2ZSBmaWd1cmVkIGl0IG91dC4gIElzc3VlIHdhcyBpbiBteSBuZXRtYXAg
ZW50cmllcy4gIFdhcyB1c2luZyB3cm9uZyBpbnRlcmZhY2UobGFuIGluc3RlYWQgb2Ygd2FuIGFu
ZCBub3Qgc3BlY2lmeWluZyBuZXQzKS4KU2VudCBmcm9tIG15IGlQaG9uZQoKPiBPbiBBcHIgMTQs
IDIwMjUsIGF0IDEyOjU14oCvUE0sIFJpY2ggR29vZHdpbiA8cmdvb2R3aW5AcmVudGFsbC1pbmMu
Y29tPiB3cm90ZToKPiAKPiDvu79IRUxQISAtLSBJIGp1c3QgY2FuJ3Qgc2VlbSB0byBmaWd1cmUg
b3V0IGhvdyB0byBjb25maWd1cmUgdGhpcy4KPiBJIGhhdmUgYSBTaG9yZXdhbGwvSVBTRUMgVlBO
IGdhdGV3YXkgY29uZmlndXJhdGlvbiB0aGF0IGlzIHdvcmtpbmcgZ3JlYXQgdG8gbXkgcmVtb3Rl
IHNpdGVzLgo+IERvaW5nIGdhdGV3YXkgdG8gZ2F0ZXdheSBhbmQgZ2F0ZXdheSB0byBjbGllbnQg
dHVubmVscyB3aGVyZSBJIGhhdmUgbm8gbmV0d29yayBvdmVybGFwIGlzc3Vlcy4KPiBXaGVyZSBJ
IGFtIHN0dWNrIGF0IGlzIEkgbmVlZCB0byBOQVQgbXkgbmV0d29yayB0byBhIGRpZmZlcmVudCBw
cml2YXRlIG5ldHdvcmsgYXMgdGhlIHJlbW90ZSBzaXRlIGFscmVhZHkgaXMgdXNpbmcgbXkgcHJp
dmF0ZSBuZXR3b3JrIHJhbmdlLgo+IAo+IEkgYW0gdXNpbmcgRGViaWFuIDExIHdpdGggdjUuMi4z
LjQgU2hvcmV3YWxsLgo+IEJ1dCBJIGhhdmUgYSBzaXRlIHdoZXJlIHRoZXJlIGlzIGFuIGFkZHJl
c3MgY29uZmxpY3Qgc28gSSBuZWVkIHRvIHJlbWFwIG15IDE5Mi4xNjguMTAuMC8yNCBuZXR3b3Jr
IHRvIDE3Mi4xNy44Ny4wLzI0Cj4gdG8gYXZvaWQgaXNzdWVzLiAgVGhleSBhbHJlYWR5IGhhdmUg
YSAxOTIuMTY4LjEwLjAvMjQgbmV0d29yayBpbiB0aGVpciBzeXN0ZW1zLgo+IAo+IEkgbmVlZCB0
byBkbyB0aGUgZm9sbG93aW5nOgo+IAo+IDE5Mi4xNjguMTAuMC8yNCA8LT4gMTcyLjE3Ljg3LjAv
MjQgPC0gSVBzZWMgdHVubmVsIC0+IDE3Mi4yOC4wLjgwLzI5IDwtPiAxNzIuMjguMC44Mgo+IAo+
IFRyYWZmaWMgZnJvbSBteSAxOTIuMTY4LjEwLjAvMjQgbmV0d29yayBuZWVkcyB0byBoYXZlIGl0
J3MgYWRkcmVzc2VzIG1hcHBlZCB0byAxNzIuMTcuODcuMC8yNCBuZXR3b3JrLgo+IFRoZW4gc2Vu
dCB0byB0aGUgMTcyLjE3Ljg3LjAvMjQgdG8gMTcyLjI4LjAuODAvMjkgdHVubmVsIGFuZCBvbiB0
byB0aGUgMTcyLjI4LjAuODIgc2VydmVyIG9uIHRoZWlyIGVuZC4KPiBUaGVuIHRoZWlyIHJlcGxp
ZXMgbmVlZCB0byBjb21lIGJhY2sgYWNyb3NzIHRoZSB0dW5uZWwgYW5kIGJlIGNvbnZlcnRlZCBi
YWNrIGZyb20gdGhlIDE3Mi4xNy44Ny4wLzI0IG5ldHdvcmsgdG8gbXkgMTkyLjE2OC4xMC4wLzI0
IG5ldHdvcmsuCj4gCj4gSSBoYXZlIHRoZSB0dW5uZWwgdXAgYW5kIGZ1bmN0aW9uYWwuCj4gTXkg
aXNzdWUgaXMgaG93IHRvIGNvbmZpZ3VyZSBTaG9yZXdhbGwgdG8gZG8gdGhlIDEgdG8gMSB0cmFu
c2xhdGlvbiBhbmQgcGFzcyBvbiB0byB0aGUgdHVubmVsLgo+IAo+IERvZXMgYW55b25lIGhhdmUg
YW4gZXhhbXBsZSBvZiB0aGlzIHRoYXQgSSBjb3VsZCBmb2xsb3c/Cj4gCj4gLS0KPiBSaWNoIEdv
b2R3aW4KPiBFbG1lbiBFbnRlcnByaXNlcy9BcHBsaWFuY2UgJiBGdXJuaXR1cmUgUmVudEFsbC9L
VFRXCj4gMjkwMSBXIDExdGggU3RyZWV0Cj4gU2lvdXggRmFsbHMsIFNEICA1NzEwNAo+IAo+IFZv
aWNlOiAgKDYwNSkgMzM4LTE4MDAgeDIyMAo+IEZheDogICAgKDYwNSkgMjc1LTgzNjEKPiBFLW1h
aWw6IHJnb29kd2luQHJlbnRhbGwtaW5jLmNvbQo+IAo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KPiBDb25maWRlbnRpYWxpdHkgTm90aWNlOgo+IFRo
aXMgZS1tYWlsIG1lc3NhZ2UsIGluY2x1ZGluZyBhbnkgYXR0YWNobWVudHMsIGlzIGZvciB0aGUg
c29sZSB1c2UKPiBvZiB0aGUgaW50ZW5kZWQgcmVjaXBpZW50KHMpIGFuZCBtYXkgY29udGFpbiBj
b25maWRlbnRpYWwgYW5kIHByaXZpbGVnZWQKPiBpbmZvcm1hdGlvbi4gQW55IHVuYXV0aG9yaXpl
ZCByZXZpZXcsIHVzZSwgZGlzY2xvc3VyZSwgb3IgZGlzdHJpYnV0aW9uCj4gaXMgcHJvaGliaXRl
ZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIGNvbnRhY3QK
PiB0aGUgc2VuZGVyIGJ5IHJlcGx5IGUtbWFpbCBhbmQgZGVzdHJveSBhbGwgY29waWVzIG9mIHRo
ZSBvcmlnaW5hbCBtZXNzYWdlLgo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0KPiAKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fXwpTaG9yZXdhbGwtdXNlcnMgbWFpbGluZyBsaXN0ClNob3Jld2FsbC11c2Vyc0Bs
aXN0cy5zb3VyY2Vmb3JnZS5uZXQKaHR0cHM6Ly9saXN0cy5zb3VyY2Vmb3JnZS5uZXQvbGlzdHMv
bGlzdGluZm8vc2hvcmV3YWxsLXVzZXJzCg==