Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-03-12 Thread Bob Proulx
Tom Roche wrote: > 1. Several years ago (when I was first struggling with getting the > F5NAP to work directly[6]), I tried to find a headless alternative > (e.g., something like a NetworkManager plugin), but was told by F5 > that there was no such client for linux (at least, with the > make/model

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-23 Thread Tom Roche
Back to this task after long detours! well, almost: Matt Ventura Fri, 23 Jan 2015 12:47:21 -0800 [1] >> The F5 VPN is throwing its default route over the original one, and that's >> causing traffic to the OpenVPN server to try to route over the F5 VPN. >> Obviously this doesn't work because the t

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-22 Thread Tom Roche
Tom Roche Thu, 22 Jan 2015 12:43:17 -0500 [1] >> summary: Smells like progress! If I'm guessing correctly, the >> `route` changes imposed by connecting to the F5VPN[2] are >> conflicting with my server/jumpbox's current `iptables`[3] (through >> which my client seeks to tunnel[4]). Does that claim

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-22 Thread Matt Ventura
On 1/22/2015 9:43 AM, Tom Roche wrote: summary: Smells like progress! If I'm guessing correctly, the `route` changes imposed by connecting to the F5VPN[3] are conflicting with my server/jumpbox's current `iptables` (through which my client seeks to tunnel[7]. Does that claim seem warranted? If

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-22 Thread Tom Roche
summary: Smells like progress! If I'm guessing correctly, the `route` changes imposed by connecting to the F5VPN[3] are conflicting with my server/jumpbox's current `iptables` (through which my client seeks to tunnel[7]. Does that claim seem warranted? If so, how to fix the server firewall? de

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-21 Thread Matt Ventura
On 1/21/2015 1:33 PM, Tom Roche wrote: Tom Roche Wed, 21 Jan 2015 12:50:04 -0500 [1] I need to tunnel one SSL VPN (F5, running on one debian host) through another (OpenVPN, running on another debian host), but lose networking (e.g., `ping`) after the F5 VPN connects. I'm not sure whether this i

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-21 Thread Tom Roche
Tom Roche Wed, 21 Jan 2015 12:50:04 -0500 [1] >> I need to tunnel one SSL VPN (F5, running on one debian host) through >> another (OpenVPN, running on another debian host), but lose networking >> (e.g., `ping`) after the F5 VPN connects. I'm not sure whether this >> is due to my firewall/iptables

Re: network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-21 Thread Matt Ventura
On 1/21/2015 9:50 AM, Tom Roche wrote: [note: following contains ASCII art in the middle, and footnoted links at the end] summary: I need to tunnel one SSL VPN (F5, running on one debian host) through another (OpenVPN, running on another debian host), but lose networking (e.g., `ping`) after

network newbie seeks assistance debugging iptables for VPN tunnel

2015-01-21 Thread Tom Roche
[note: following contains ASCII art in the middle, and footnoted links at the end] summary: I need to tunnel one SSL VPN (F5, running on one debian host) through another (OpenVPN, running on another debian host), but lose networking (e.g., `ping`) after the F5 VPN connects. I'm not sure whethe