Mark,

What you're looking to do is set up an IPSEC VPN, not static routes.  
That is how you will accomplish what you are trying to do.  You can not 
route 192.168.x.x private addresses over the internet without the 
benefit of a VPN tunnel.

Chris


Mark Wass wrote:

> Hi All
>
> I have a routing question. Can I route a network on my OPT1 interface 
> from one m0n0wall box over the internet to another m0n0wall box. See 
> diagram below.
>
>
>       OPT1 192.168.3.0/24
>                |
>                |
>                |
>                |OPT1 = 192.168.3.1/24
>             m0n0wall#1
>                |WAN = 203.xxx.xxx.1
>                |
>                | [Internet - many hops between]
>                |
>                |WAN = 204.xxx.xxx.30                   m0n0wall#2
>                |OPT1 = 192.168.4.1/24
>                |
>                |
>                |
>       OPT1 192.168.4.0/24
>
> If I wanted a server at the address 192.168.3.2 to connect to a server 
> (say via ssh) 192.168.4.2 could I put a static route on m0n0wall#1 
> like this.
>
> Interface   Network            Gateway
> WAN         192.168.4.0/24     204.xxx.xxx.30
>
> Thanks
> Mark
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>