<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
That makes sense and is easy - thanks.<br>
<br>
<div class="moz-cite-prefix">On 5/6/2017 13:38, Noel Kuntze wrote:<br>
</div>
<blockquote type="cite"
cite="mid:e503dbe1-7542-5b33-3afa-e844daf0b957@thermi.consulting">
<pre wrap="">Use a seperate subnet that is routed over the host strongSwan is running on or enable proxy arp and setup proxy arp in the updown script.
On 06.05.2017 20:33, Karl Denninger wrote:
</pre>
<blockquote type="cite">
<pre wrap="">
I've had Strongswan working without incident on a host that is direct internet-facing for quite some time.
Now I wish to run it on a host that is NOT direct internet-facing - that is, the configuration looks like this:
Internet-------Firewall---------------DMZ Host
I can easily (and successfully) "hole punch" through the firewall for ports 500 and 4500, so it comes up. HOWEVER, FreeBSD apparently does not support the "farp" plugin (it won't compile on 5.5.1) and as a result there's a problem because once I get the private address from the DMZ host the network doesn't know how to find it. It continually beacons for an ARP response and not getting one, nothing works.
Is there an answer for this in the FreeBSD world under StrongSwan?
--
Karl Denninger
<a class="moz-txt-link-abbreviated" href="mailto:karl@denninger.net">karl@denninger.net</a> <a class="moz-txt-link-rfc2396E" href="mailto:karl@denninger.net"><mailto:karl@denninger.net></a>
/The Market Ticker/
/[S/MIME encrypted email preferred]/
_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</a>
</pre>
</blockquote>
<pre wrap="">
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
Karl Denninger<br>
<a href="mailto:karl@denninger.net">karl@denninger.net</a><br>
<i>The Market Ticker</i><br>
<font size="-2"><i>[S/MIME encrypted email preferred]</i></font>
</div>
</body>
</html>