From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Rangi Biddle" Date: Wed, 22 Nov 2006 02:20:46 +0000 Subject: [LARTC] RE: VPN Solution Message-Id: <000901c70ddc$d53cb440$0101010a@lamachine> MIME-Version: 1 Content-Type: multipart/mixed; boundary="===============1798026633==" List-Id: References: <000601c70d37$a48d3b30$0101010a@lamachine> In-Reply-To: <000601c70d37$a48d3b30$0101010a@lamachine> To: lartc@vger.kernel.org This is a multi-part message in MIME format. --===============1798026633== Content-Type: multipart/alternative; boundary="----=_NextPart_000_000A_01C70E49.CC35FC40" This is a multi-part message in MIME format. ------=_NextPart_000_000A_01C70E49.CC35FC40 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi List, This is an update for anyone that has been attempting to get a PPTP VPN working using PopTop with more than one simultaneous connection from an external source to a PPTP VPN behind a router that is NATing connections through. I assume that whoever is setting this up has some general knowledge of linux and how to compile a kernel. I also make the assumption that you already have a PPTP server up and running but are requiring more than one simultaneous connection. I also offer no warranties or take on any responsibility on whether or not this breaks your system and causes damage of any kind. With that said, I used the most recent kernel (2.6.18.3) and used all the default settings and added in all (except the experimental) iptables modules. I also added in PPP MPPE support (even though it is experimental). To make things easier on myself I compiled the kernel as a binary RPM package since the distro that I am using uses RPMs. After installing the new kernel I made modifications to my boot loader (in my case grub) to use the new kernel and then rebooted the system. I used the following IPTables rules: iptables -t nat -A POSTROUTING -j MASQUERADE - (Very general masquerading - not recommended and should be tied down to specific subnets) iptables -A INPUT -p tcp -dport 1723 -j ACCEPT (Accept inbound PPTP connections) iptables -A INPUT -p gre -j ACCEPT (Accept inbound GRE connections) iptables -A OUTPUT -p gre -j ACCEPT (Accept outbound GRE connections) I executed the command: service iptables save to save my newly added iptables rules. I then edited /etc/rc.local and added in the following lines modprobe ip_nat_pptp modprobe ip_conntrack_pptp Which loads the additional modules needed for PPTP NAT connections and finally rebooted the system once more to make sure everything starts up as expected. If you have any problems please mail them to the list and I will see if I can be of some assistance. ------=_NextPart_000_000A_01C70E49.CC35FC40 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi List,

This is an update for anyone that has been = attempting to get a PPTP VPN working using PopTop with more than one simultaneous = connection from an external source to a PPTP VPN behind a router that is NATing connections through. I assume that whoever is setting this up has = some general knowledge of linux and how to compile a kernel. I also = make the assumption that you already have a PPTP server up and running but are = requiring more than one simultaneous connection. I also offer no warranties = or take on any responsibility on whether or not this breaks your system and = causes damage of any kind.

With that said, I used the most recent kernel (2.6.18.3) and used all the default settings and added in all (except = the experimental) iptables modules. I also added in PPP MPPE support (even though it = is experimental). To make things easier on myself I compiled the = kernel as a binary RPM package since the distro that I am using uses = RPMs.

After installing the new kernel I made = modifications to my boot loader (in my case grub) to use the new kernel and then = rebooted the system.

I used the following IPTables = rules:

iptables –t nat –A POSTROUTING = –j MASQUERADE – (Very general masquerading – not recommended and should be = tied down to specific subnets)

iptables –A INPUT –p tcp = –dport 1723 –j ACCEPT (Accept inbound PPTP = connections)

iptables –A INPUT –p gre –j = ACCEPT (Accept inbound GRE connections)

iptables –A OUTPUT –p gre –j = ACCEPT (Accept outbound GRE connections)

I executed the = command:

service iptables = save

to save my newly added iptables = rules.

I then edited /etc/rc.local and added in the following lines

modprobe = ip_nat_pptp

modprobe = ip_conntrack_pptp

Which loads the additional modules needed for = PPTP NAT connections and finally rebooted the system once more to make sure = everything starts up as expected.

If you have any problems please mail them to = the list and I will see if I can be of some = assistance.

------=_NextPart_000_000A_01C70E49.CC35FC40-- --===============1798026633== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc --===============1798026633==--