login
Search
I was just wondering if anyone has any experience connecting to outside VPNs from a network secured by an OpenBSD/pf firewall? Outgoing traffic is keep state but that doesn't work. There has to be more to it than just opening port 500. Maybe something to do with the way it randomizes outgoing source ports? Please help, as I am new to OpenBSD...
Re: VPN (IPSEC) Pass through
There probably will be more to it than opening port 500 for IKE (that's UDP 500 by the way).
Standard IPSEC connections also use protocols (_not_ ports) 50 & 51, so you may need to open that up. If instead you're using IPSEC NAT traversal, you will probably need to open up destination port UDP 4500 (maybe inbound as well).
Generally speaking, NAT & IPSEC go together like oil & water and various things depend on the implementation you're using. I'm not an OpenBSD expert, so sorry I can't be of more help. Good luck.