up vote 0 down vote favorite
share [g+] share [fb]

I am setting up an SSH TUN ("-w") VPN using this how-to: https://help.ubuntu.com/community/SSH_VPN

I have the following in my /etc/network/interfaces:

iface tun0 inet static
       pre-up ssh -f -w 0:0 singpolyma.dnsalias.net 'ifdown tun0; ifup tun0'
       pre-up sleep 10
       address 10.0.0.2
       pointopoint 10.0.0.1
       netmask 255.255.255.0
       up route add -net 10.0.0.0 netmask 255.255.255.0 gw 10.0.0.2 tun0
       up route add singpolyma.dnsalias.net gw 10.2.1.1 eth0
       up route add default gw 10.0.0.1 tun0
       up route del default gw 10.2.1.1 eth0
       down route add default gw 10.2.1.1 eth0
       down route del default gw 10.0.0.1 tun0
       down route del -net 10.0.0.0 netmask 255.255.255.0 gw 10.0.0.2 tun0
       down route del singpolyma.dnsalias.net gw 10.2.1.1 eth0

Then tun0 on the machine I'm tunneling from (the ssh client) comes up fine, but traffic does not route. This makes some sense, since that code is trying to use 10.0.0.1 (the tun IP of the machine I'm SSHing into) as default gateway instead of the actual remote default gateway. When I put the actual remote gateway IP (192.168.0.1) in the routes, the commands fail with a "not found" error.

What should I be doing differently?

link|improve this question
62% accept rate
You've left out a lot of information. Using the linked article can you identify which machine you're referring to when you say 'it'. Is it Machine A, or Machine B? Did you set up the config on both ends of the tunnel? Did the manual process work before you tried the automated ifup config? – John Weldon Oct 22 '10 at 16:06
edited the post – singpolyma Oct 22 '10 at 18:19
Can you ping 10.0.0.2 when the tunnel is up? – Jimmy Hedman Feb 9 '11 at 14:20
feedback

1 Answer

up vote 0 down vote accepted

In addition to running:

sysctl -w net.ipv4.ip_forward=1

on Ubuntu it seems you also need to run:

iptables -P FORWARD ACCEPT
iptables --table nat -A POSTROUTING -o eth0 -j MASQUERADE
link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.