🚀 go-pugleaf

Greetings!

Enash schrieb:

> > I know it's probably impossible to allow Linux to connect to the
> > Checkpoint server using the FW-1's FWZ protocol (since it's proprietary),
> > so I need to know if it's possible to connect using IPSEC and ip
> > masquerading (and how to do it).

I seriously doubt that you could do any VPN solution with FWZ but IPSEC should
be possible with FreeSWAN (http://www.freeswan.org/).



> > We've got about 25 programmers who need to dial in from home. ALL of them
> > use Linux. Our internal network is protected by the Checkpoint FW-1. All
> > of the users NEED to be able to connect to the CVS server which is located
> > in the deepest recesses of our LAN. They will be connecting using ADSL
> > (PPPoE) and dial-ip (PPP).

Another possibility would be to enable authentication on the firewall and allow
authenticated users to access that one specific server only. Nice side-effect:
the remainder of your LAN will still be protected.  With a(ny) VPN solution the
programmers will be part of your LAN.

Bye
    Volker

--

Volker Tanger  <volker.tanger@detewe.de>
 Wrangelstr. 100, 10997 Berlin, Germany
    DiSCON GmbH - Internet Solutions
         http://www.discon.de/