Firewalling and FreeS/WAN

[Supa' Penguin]

Hello gentle readers,

firstly, thank you for participating in this exchange of expertise.

My problem is with 2 routers that i've setup between my house and a friends. Both of us are using cable and dyndns services to connect to eachother via FreeS/WAN.

My issues occur when I use the routers to make available the internet(NAT) and the ipsec(FreeS/WAN) services. How would I exclude from the NAT all legitimate traffic destined for the ipsec service and vice versa.

Almost bald.

J

[Supa' Penguin]

i forgot to mention that i'm using IPTABLES for the filtering and FreeS/WAN 1.98b for the VPN. I'm not able to use the ipsec device (as in IPTABLES -i ipsec+ or -o ipsec+) as the dyndns service does not allow the addition of the key and txt records.