Re: Checkpoint Secure Remote Client w/OpenBSD firewall

From: jussi jaakonaho (jussi_at_nospam.mataaratanga.com)
Date: 04/29/03 

Date: Tue, 29 Apr 2003 21:23:41 +0300

"phusnikn" <phusnikn@cynikal.net> wrote in message
news:G9mra.27148$su3.3078926@twister.nyc.rr.com...
> Hi all I have a Checkpoint secure remote client and im trying to access a
> what I tried, my NT box is nat'd behind an openbsd firewall.

-that's no problem, add this to your pf.conf (i'm using 3.3beta, so the
syntax might be a bit different depending of your version)
nat on $ext_if inet proto udp from any port = isakmp to any -> $ext_if port
500

then for the traffic: open 264/tcp and 500/udp and 2746/udp from the vpn
client to vpn server

hope this helps,

_jussi