I have to get to work pptp masquerading for multiple simultaneous vpn connections for w2k clients behind the iptables-firewall to a vpn server on the Internet. The latest patch allowing vpn connections from behind a nated firewall at all is netfilter_pptp_patch_2.4.19_rev1 by Brian Kuschak, and it works great but only for one connection at the same time to the same server (because of lack of the pptp Call ID support?). As I understood, the z-newnat16.patch would solve the problem, but I have not been able to apply this patch. Someone wrote in the list he could not do it neither. Is the problem related to the kernel version (the status says it's submitted for 2.4.20-pre1 but I use 2.4.19)? I have heard that someone tried to appliy the patch to the 2.4.20-pre7 had no success, too. How it could be done, and would it solve my problem at all?

Another question: I cannot supply some patches I could with an older kernel (2.4.18-3), ip_conntrack_protocol_destroy.patch and config-cleanup.patch
for example. Have someone met the same behavior? Without the ip_conntrack-staff the nat-pptp would not work as module, would it?