Ok. Here is my scenario. Any help would be greatly appreciated. I am running redhat 7.2, which I have upgraded to linux 2.4.17. I run gShield 2.7.1. gShield works great for every application, with the exception of a twist.

The company I work for has a cisco VPN concentrator. It listens on port 1739 I believe. Connecting to this VPN from one of the NATed machines behind my gShield firewall works great. Connecting directly from the linux gShield firewall box works great if gShield is not running. Once I run gShield the VPN will not work. I am at a bit of a loss here. It continues to run on the NATed machines, but not on the firewall itself. Again, any help would be much appreciated.

..>SK<..

I can't remember the ports, but Cisco VPN client likes to listen on UDP ports 62,***

Use netstat -a on your windows client to see what ports Cisco is listening on.

You can also use fport, which will associate open ports with application names.

I had to open port 500 (both tcp and udp, though I'm not sure both protocols are necessary) to get the Cisco VPN client working (on 2.4.18, 2.4.20 kernels).