<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: arial,helvetica,sans-serif; font-size: 12pt; color: #000000'>Thanks!<br><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"George Allen" <glallen01@gmail.com><br><b>To: </b>"Atlanta Linux Enthusiasts" <ale@ale.org>, sp@scottplante.com<br><b>Sent: </b>Thursday, October 18, 2012 10:14:13 PM<br><b>Subject: </b>[ale] VPN / NAT question from meeting<br><br>So, there was a question about sharing a VPN connection with a LAN<br>through NAT. I believe something like this should work:<br><br>echo "1" > /proc/sys/net/ipv4/ip_forward<br>iptables -A FORWARD -i eth0 -d 10.0.0.0/8 -j ACCEPT<br>iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE<br>sysctl net.netfilter.nf_conntrack_acct=1<br><br>as referenced here: http://www.bloovis.com/wordpress/?p=219<br><br>/break/<br><br>I haven't read through it all, but this looks interesting, with regard<br>to building one's own tunnel:<br>http://www.mad-hacking.net/documentation/linux/networking/ipsec/nat-vpn.xml<br><br>Also, the Linux HOWTOs are kindof dated, but they're still good<br>reading and reference:<br>http://www.tldp.org/HOWTO/VPN-Masquerade-HOWTO.html<br>http://www.tldp.org/HOWTO/NET3-4-HOWTO.html<br>http://www.tldp.org/HOWTO/Networking-Overview-HOWTO.html<br><br>Hope this helps,<br>-George<br>_______________________________________________<br>Ale mailing list<br>Ale@ale.org<br>http://mail.ale.org/mailman/listinfo/ale<br>See JOBS, ANNOUNCE and SCHOOLS lists at<br>http://mail.ale.org/mailman/listinfo<br></div><br></div></body></html>