> Destination Gateway Genmask Flags Metric Ref Use Iface > 10.0.0.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 not sure, if this is necessary - but it should not hurt.
> tun0 Link encap:Point-to-Point Protocol > inet addr:10.0.0.2 P-t-P:10.0.0.1 Mask:255.255.255.255 > UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:10 > > Destination Gateway Genmask Flags Metric Ref Use Iface > 192.168.1.0 10.0.0.1 255.255.255.0 UG 0 0 0 tun0 huuuh - this should be your problem, if i didn´t miss the idea of vtun. the gateway host should be the local side of the tunnel. > ifconfig "%% 10.0.0.1 pointopoint 10.0.0.2 mask 255.255.255.255 mtu > 1450"; > route "add -net 192.168.0.0 netmask 255.255.255.0 gw 10.0.0.2"; is bad, good would be: ifconfig "%% 10.0.0.2 pointopoint 10.0.0.1 mask 255.255.255.255 mtu 1450"; route "add -net 192.168.0.0 netmask 255.255.255.0 gw 10.0.0.2"; however, i´m just guessing, as i never touched vtun. your ipchains rules are a mess, but the look good in general. :-) -- Hi! I'm a .signature virus! Copy me into your ~/.signature, please! -- Linux - the last service pack you'll ever need.