From: stephen@dino.dnsalias.com   
      
   "Kissingfish"  writes:   
   > I'm trying to set up a VPN connection through two firewalls.   
   > My network is as follows:   
   >   
   >   
   > | Internet | - |firewall| - | DMZ | - | firewall | - | lan |   
   >   
   > Obviously I can go from the lan through the firewall, to the DMZ and   
   > through the firewall to the internet.. But you can't go from the DMZ   
   > onto the lan.. Or from the internet to the lan..   
   >   
   > I want to know if there's a way I could VPN to the lan so I can use   
   > remotedesktop or VNC to access my computer..   
   >   
   > My DMZ has a 192.168.1.x IP range, whilst my LAN has a 192.168.168.x   
   > range.   
   >   
   > If I VPN to my first firewall, I won't be able to access anything on   
   > the lan, and if I VPN to the second, well.. I can't get past the first   
   > one..   
   >   
   > Anyone ever done something like this before?   
      
   If both firewalls support IPsec then you could do double tunnelling.   
   The outer firewall is configured to protect the DMZ subnet and   
   the inner firewall is set to protect the lan.  Thus to connect to the   
   lan you create an IPsec connection to the outer firewall through which   
   you create an IPsec connection to the inner firewall and hence the lan.   
      
   If that all sounds like too much work try running Hamachi   
    on any PCs on the LAN you want to talk to and   
   on your PC on the internet.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)