Topic: http traffic over ipsec problem

[Mace]

OK, I'm at my wit's end here. I've searched and tried everything i could understand to do.

I've set up an ipsec vpn using the following howtos:

http://forums.contribs.org/index.php?topic=31528.0
http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/security-guide/s1-ipsec-net2net.html

The problem lies with accessing an intranet http server from a remote lan. I can ssh, ping, https, etc. but cannot get http to respond from the intranet http server (which doesn't do https) behind the sme ipsec server.  The only http (port 80) traffic i can get from the intranet side is from the sme ipsec server itself, but nothing behind it.

I hope i'm making sense, I'll sum it up:

Working:

Code: [Select]

SMTP: clients -> remote lan -> sme ipsec client -> internet -> sme ipsec server's smtp
POP3: lan 2 clients -> sme ipsec client -> internet -> sme ipsec server's pop3
TELNET: lan 2 clients -> sme ipsec client -> internet -> sme ipsec server -> lan 1 accounting server
HTTPS: lan 2 clients -> sme ipsec client -> internet -> sme ipsec server -> any lan 1 server supporting https
SSH: lan 2 clients -> sme ipsec client -> internet -> sme ipsec server -> any lan 1 server supporting ssh
HTTP: lan 2 clients -> sme ipsec client -> internet -> sme ipsec server ONLY
Not working:

Code: [Select]

HTTP: lan 2 clients -> sme ipsec client -> internet -> sme ipsec server -> any lan 1 server supporting http

So, basically I need to know what i need to check to allow traffic on port 80 to pass fully and be forwarded through the ipsec tunnel.

Please let me know if i need to provide any more info.

Thanks.