I have set up my smoothwall 1.0 to access another remote base. I have got everything set up ok apparently, and both bases are reporting the VPN running in the INFO window (webadmin). However, in the manual control panel, it is CLOSED. Have tried clicking RESTART, and tried rebooting both firewalls. Same thing happens.

I have edited the rp_filter file in /proc/sys/net/ipv4/conf/eth1 to read 0 instead of 1 as suggested by the logs on both smoothwalls.

Anyone got a clue what i've done wrong.

one more thing: does ENABLED need to be ticked in GLOBAL VPN under the services tab? To use VNC, do i need to open other ports, and if so, any idea which ones?

Thanks in advance.
Dylan.

"The Enable checkbox will tell SmoothWall to automatically bring up the Enabled VPN tunnels when the RED interface comes up. Even when disabled, it is still possible to manually bring up the tunnels."

You will need to modify /etc/rc.d/rc.vpn to include this line before the last 'if fi' statement.
echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter
and an 'echo 1 >' version as the last line in the rc.vpn.down file.

From http://www.uk.research.att.com/vnc/faq.html#q53
Q53 Which TCP/IP ports does VNC use?

A VNC server listens on two ports. The exact port numbers depend on the VNC display number, because a single machine may run multiple servers. The most important one is 59xx, where xx is the display number. The VNC protocol itself runs over this port. So for most PC servers, the port will be 5900, because they use display 0 by default.

In addition, VNC servers normally have a small and very restricted web server built in, which allows you to connect a browser to them and use the Java viewer. This runs on port 58xx. Note that this is the HTTP port used for downloading pages and applets, but once the applet is running it uses 59xx for VNC just like any other viewer.

The servers can be changed to listen on other ports if, for any reason, these are not suitable for you. See the server's documentation for more details. Most of the viewers, if given a display number larger than 99, will interpret it as a direct port number and will not add 5900. See also the next question.

If you are running a viewer in 'listening' mode, where it accepts connections initiated by the server, it will listen for incoming VNC on port 5500.