thanks chris and björn. i'll either set up a second box or use pptp.

--

Thomas Lohner


Am 24.10.2005 21:07 Uhr schrieb "Bjoern Euler (lists at edain)" unter
<lists at edain dot de>:

> lola wrote:
> 
>> it doesnt matter what rules i have, ipsec mobile clients alway have full
>> access to all networks. am i missing something?
>> 
> 
> As Chris pointed out: unfortunately it is not possible at the moment
> with m0n0wall. (Though the underlying firewall software supports it.)
> 
> Possible workarounds:
> -make the VPN tunnel only use the desired network (afaik Bintec uses
> 0.0.0.0/0 as default remote subnet)
> -Setup filter on the Bintec clients
> -Use a second firewall/m0n0wall behind your VPN box to implement the
> filtering
> 
> Regards
> 
> -Björn
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>