From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Aldo S. Lagana" Subject: RE: PPTP through masquerading gateway Date: Mon, 8 Jul 2002 17:06:33 -0400 Sender: netfilter-admin@lists.samba.org Message-ID: <001901c226c3$573f4e40$3864a8c0@discmail.com> References: <000d01c226c1$9a049390$6b01a8c0@s3ac> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_001A_01C226A1.D02DAE40" Return-path: In-Reply-To: <000d01c226c1$9a049390$6b01a8c0@s3ac> Errors-To: netfilter-admin@lists.samba.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: 'Rowan Reid' , 'Marc Riddle' , netfilter@lists.samba.org This is a multi-part message in MIME format. ------=_NextPart_000_001A_01C226A1.D02DAE40 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I am in the process of using that module to allow 'outgoing' from behind a Linux firewall - which is a little different than your situation. I have gotten the POM module to patch cleanly against 2.4.16 with iptables 1.2.5, now I just need to get that test box out on the wire to give it a go... I'l let you know if my scenario works out... -----Original Message----- From: Rowan Reid [mailto:rreid@studio3arc.com] Sent: Monday, July 08, 2002 4:54 PM To: 'Aldo S. Lagana'; 'Marc Riddle'; netfilter@lists.samba.org Subject: RE: PPTP through masquerading gateway I've been trying to get this to work. with no luck. I've used the POM module which fails everytime I try to patch my kernel 2.4.4 and up no luck even on a freshly downloaded kernel. other patches work but pptp does not. I tried another patch which patched my 2.4.18 kernel but all my connections fail to make it to my server. I woudl love to talk to at least one person who HAS gotten this to work. Are you using the POM ip_conntrack_pptp module (or compiled into kernel)? I am fairly sure that NAT of any type 'breaks' PPTP connections, and the above module is needed for you to NAT the PPTP connections... -----Original Message----- From: netfilter-admin@lists.samba.org [mailto:netfilter-admin@lists.samba.org] On Behalf Of Marc Riddle Sent: Monday, July 08, 2002 2:17 PM To: netfilter@lists.samba.org Subject: PPTP through masquerading gateway iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 1723 -j DNAT --to 10.1.1.15 iptables -t nat -A PREROUTING -i ppp0 -p 47 -j DNAT --to 10.1.1.15 ------=_NextPart_000_001A_01C226A1.D02DAE40 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Message
I am=20 in the process of using that module to allow 'outgoing' from behind a = Linux=20 firewall - which is a little different than your situation. =20
 
I have=20 gotten the POM module to patch cleanly against 2.4.16 with iptables = 1.2.5, =20 now I just need to get that test box out on the wire to give it a=20 go...
 
I'l=20 let you know if my scenario works out...
-----Original Message-----
From: = Rowan Reid=20 [mailto:rreid@studio3arc.com]
Sent: Monday, July 08, 2002 = 4:54=20 PM
To: 'Aldo S. Lagana'; 'Marc Riddle';=20 netfilter@lists.samba.org
Subject: RE: PPTP through = masquerading=20 gateway

 
 
I've=20 been trying to get this to work. with no luck. I've used the POM = module which=20 fails everytime I try to patch my kernel 2.4.4 and = up
no=20 luck even on a freshly downloaded kernel. other patches work but pptp = does=20 not. I tried another patch which patched my 2.4.18 = kernel
but=20 all my connections fail to make it to my server.  I woudl love to = talk to=20 at least one person who HAS gotten this to work.
 

Are you using the POM ip_conntrack_pptp module (or compiled = into=20 kernel)?
 
I=20 am fairly sure that NAT of any type 'breaks' PPTP connections, and = the above=20 module is needed for you to NAT the PPTP = connections...
-----Original Message-----
From:=20 netfilter-admin@lists.samba.org = [mailto:netfilter-admin@lists.samba.org]=20 On Behalf Of Marc Riddle
Sent: Monday, July 08, = 2002 2:17=20 PM
To: netfilter@lists.samba.org
Subject: PPTP = through=20 masquerading gateway

iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 1723 -j DNAT --to =
10.1.1.15
iptables -t nat -A PREROUTING -i ppp0 -p 47 -j DNAT --to 10.1.1.15
  
<= /BLOCKQUOTE>
------=_NextPart_000_001A_01C226A1.D02DAE40--