[LARTC] RE: VPN Solution

["Rangi Biddle" <rangi@ngen.net.nz>]

[-- Attachment #1.1: Type: text/plain, Size: 1989 bytes --]

Hi List,

 

This is an update for anyone that has been attempting to get a PPTP VPN
working using PopTop with more than one simultaneous connection from an
external source to a PPTP VPN behind a router that is NATing connections
through.  I assume that whoever is setting this up has some general
knowledge of linux and how to compile a kernel.  I also make the assumption
that you already have a PPTP server up and running but are requiring more
than one simultaneous connection.  I also offer no warranties or take on any
responsibility on whether or not this breaks your system and causes damage
of any kind.

 

With that said, I used the most recent kernel (2.6.18.3) and used all the
default settings and added in all (except the experimental) iptables
modules.  I also added in PPP MPPE support (even though it is experimental).
To make things easier on myself I compiled the kernel as a binary RPM
package since the distro that I am using uses RPMs.

 

After installing the new kernel I made modifications to my boot loader (in
my case grub) to use the new kernel and then rebooted the system.

 

I used the following IPTables rules:

 

iptables -t nat -A POSTROUTING -j MASQUERADE - (Very general masquerading -
not recommended and should be tied down to specific subnets)

iptables -A INPUT -p tcp -dport 1723 -j ACCEPT (Accept inbound PPTP
connections)

iptables -A INPUT -p gre -j ACCEPT (Accept inbound GRE connections)

iptables -A OUTPUT -p gre -j ACCEPT (Accept outbound GRE connections)

 

I executed the command:

 

service iptables save

 

to save my newly added iptables rules.

 

I then edited /etc/rc.local and added in the following lines

 

modprobe ip_nat_pptp

modprobe ip_conntrack_pptp

 

Which loads the additional modules needed for PPTP NAT connections and
finally rebooted the system once more to make sure everything starts up as
expected.

 

If you have any problems please mail them to the list and I will see if I
can be of some assistance.


[-- Attachment #1.2: Type: text/html, Size: 7098 bytes --]

[-- Attachment #2: Type: text/plain, Size: 143 bytes --]

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc