I have recomplied 2.6.8 to include IPSec user configuration interface. I have also installed ipsec-tools, but I am unsure of what to do next.

My firewall and VPN server are the same machine and NAT and iptables are working fine as I can access the Internet from the NAT'd machines. From all the research I have done, I guess I need to "advertise" the paths to NAT'd machine through the Firewall/VPN server, but I am not sure how to do it. Unfortunatley the Linux VPN Masquerade HOWTO is pretty old and doesn't cover 2.4 - 2.6 kernels.

Any help would be appreciated.

Thanks.

Matt

im not good enough at english.
i hope i have understood your trouble.

i have poptop vpn server. it works like that:
internet--------------------------------------- (eth1)
..................................................... |
client--- tunnel over eth1--(ppp0) vpn-firewall-box (eth0)---- LAN
192.168.16.0/24.......................................................192.168.0.0/24

here is the iptables rule that allow VPN client to access LAN.
i hope this helps u.

good luck.